Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2023-0044
If the Quarkus Form Authentication session cookie Path attribute is set to / then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.
| Software | From | Fixed in |
|---|---|---|
| quarkus / quarkus | - | 2.13.7 |
io.quarkus / quarkus-vertx-http
|
- | 2.13.7.Final |