VDB
BDU%3A2023-05461
BDU%3A2023-05461
PUBLISHED
CVSS 8.100000381469727 HIGH
Уязвимость политики безопасности HTTP Java-фреймворка Quarkus, позволяющая нарушителю обойти ограничения безопасности, получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Camel Extensions for Quarkus 2.13.3-1 | |
| Red Hat | Red Hat OpenShift Serverless 1.30 | 1.30.1-1 |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.4-3 |
| Red Hat | RHINT Camel-K-1.10.2 | |
| Red Hat | RHPAM 7.13.4 async | |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.4-3 |
| Red Hat | Red Hat build of OptaPlanner 8 | |
| Red Hat | Red Hat OpenShift Serverless 1.30 | 1.9.2-3 |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.4-3 |
| Red Hat | Red Hat OpenShift Serverless 1.30 | 1.30.1-1 |
| Red Hat | Red Hat OpenShift Serverless 1.30 | 1.30.0-5 |
| Red Hat | Red Hat OpenShift Serverless 1.30 | 1.30.1-1 |
| Red Hat | Red Hat build of Quarkus 2.13.8.SP2 | 2.13.8.Final-redhat-00005 |
| Red Hat | RHINT Service Registry 2.5.4 GA | |
| Red Hat | Red Hat build of Quarkus 2.13.8.SP2 | 2.13.8.Final-redhat-00005 |
| Red Hat | Red Hat OpenShift Serverless 1.30 | 1.30.0-6 |
| Red Hat Inc. | Red Hat Process Automation, Red Hat build of Quarkus, Red Hat Integration Camel K, Red Hat Integration Service Registry, Red Hat Integration Camel Quarkus, Decision Manager, OpenShift Serverless, Red Hat build of OptaPlanner | |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.4-2 |
| Red Hat | Red Hat OpenShift Serverless 1.30 | 1.30.1-1 |
| Red Hat | Red Hat build of Quarkus 2.13.8.SP2 | 2.13.8.Final-redhat-00005 |
…and 6 more
Timeline
- Sep 12, 2023 CVE Published
- Sep 20, 2023 PoC Published
- Sep 13, 2024 CVE Updated
- May 21, 2026 Distribution Patch
- May 21, 2026 Distribution Patch
- May 21, 2026 Distribution Patch
- May 21, 2026 Distribution Patch
- May 21, 2026 Distribution Patch
- May 21, 2026 Distribution Patch
- May 21, 2026 Distribution Patch
- May 21, 2026 Distribution Patch
- May 21, 2026 Distribution Patch
References
- https://vuldb.com/ru/?id.239288 url
- https://access.redhat.com/security/cve/cve-2023-4853 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2238034 url
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-002 url
- RHSA-2023:5170 vendor-advisory
- RHSA-2023:5310 vendor-advisory
- RHSA-2023:5337 vendor-advisory
- RHSA-2023:5446 vendor-advisory
- RHSA-2023:5479 vendor-advisory
- RHSA-2023:5480 vendor-advisory
- RHSA-2023:6107 vendor-advisory
- RHSA-2023:6112 vendor-advisory
- RHSA-2023:7653 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-4853 vdb