https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:05:47 +0000 https://cve.radiocsirt.org/vuln/cve-2023-4853 <p><strong>Affected:</strong> Red Hat Openshift Serverless 1 on RHEL 8, Red Hat build of OptaPlanner 8, Red Hat build of Quarkus 2.13.8.SP2, Red Hat Camel Extensions for Quarkus 2.13.3-1, Red Hat OpenShift Serverless 1.30, Red Hat RHEL-8 based Middleware Containers, Red Hat RHINT Camel-K-1.10.2, Red Hat RHINT Service Registry 2.5.4 GA, Red Hat RHPAM 7.13.4 async, Red Hat build of Quarkus and 1 more</p> <p>A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.</p> <p><strong>Affected:</strong> Red Hat Openshift Serverless 1 on RHEL 8, Red Hat build of OptaPlanner 8, Red Hat build of Quarkus 2.13.8.SP2, Red Hat Camel Extensions for Quarkus 2.13.3-1, Red Hat OpenShift Serverless 1.30, Red Hat RHEL-8 based Middleware Containers, Red Hat RHINT Camel-K-1.10.2, Red Hat RHINT Service Registry 2.5.4 GA, Red Hat RHPAM 7.13.4 async, Red Hat build of Quarkus and 1 more</p> <p>A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.</p> https://cve.radiocsirt.org/vuln/cve-2023-4853