https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:38:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05461 bdu:2023-05461 https://cve.radiocsirt.org/vuln/bdu:2023-05461 https://cve.radiocsirt.org/vuln/euvd-2026-344184 EUVD-2026-344184 https://cve.radiocsirt.org/vuln/euvd-2026-344184 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4853 <p>A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.</p> <p>A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4853 https://cve.radiocsirt.org/vuln/ghsa-4f4r-wgv2-jjvg <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-vertx-http, Maven: io.quarkus:quarkus-undertow, Maven: io.quarkus:quarkus-csrf-reactive, Maven: io.quarkus:quarkus-keycloak-authorization</p> <p>A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.</p> <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-vertx-http, Maven: io.quarkus:quarkus-undertow, Maven: io.quarkus:quarkus-csrf-reactive, Maven: io.quarkus:quarkus-keycloak-authorization</p> <p>A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-4f4r-wgv2-jjvg https://cve.radiocsirt.org/vuln/gsd-2023-4853 gsd-2023-4853 https://cve.radiocsirt.org/vuln/gsd-2023-4853 https://cve.radiocsirt.org/vuln/rhsa-2023:5170 <p>quarkus: HTTP security policy bypass</p> <p>quarkus: HTTP security policy bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2023:5170 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2362 <p>Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat Quarkus ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat Quarkus ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2362