CVE-2022-2466

Published: Aug 31, 2022
Updated: May 9, 2024
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-2466" target="_blank" rel="noopener"> CVE-2022-2466
GHSA: <a href="https://github.com/advisories/GHSA-mwhw-6p27-4crc" target="_blank" rel="noopener"> GHSA-mwhw-6p27-4crc
Severity: Critical
Exploit:

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

CVSS v3:

CWEs:

Software	From	Fixed in
quarkus / quarkus	2.10.0	2.10.4
io.quarkus / quarkus-core-parent	2.10.0	2.10.4