GHSA-8fhc-q55v-jvx2

GHSA-8fhc-q55v-jvx2 PUBLISHED CVSS 4.699999809265137 MEDIUM

Record from GitHub Advisory Database · Published September 27, 2023

A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.

Risk scores

CVSS 3.1

4.699999809265137

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Timeline

Sep 27, 2023 CVE Published
Apr 10, 2026 Distribution Patch (2 in total, the first dated here)
Apr 10, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-8fhc-q55v-jvx2
vulnetix vdb fixes GHSA-8fhc-q55v-jvx2

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-8fhc-q55v-jvx2/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →