serverless 1.0 güvenlik açıkları (CVE)

serverless 1.0 için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

1 sonuç
8.1Yüksek
CVE-2023-4853

Quarkus: http security policy bypass

Red Hat Openshift Serverless 1 on RHEL 8; Red Hat Red Hat build of OptaPlanner 8; Red Hat Red Hat build of Quarkus 2.13.8.SP2; Red Hat Red Hat Camel Extensions for Quarkus 2.13.3-1

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy al…

2.3%EPSS