Vulnerabilities > Quarkus > Quarkus > 3.2.4

DATE CVE VULNERABILITY TITLE RISK
2024-01-25 CVE-2023-6267 Improper Handling of Exceptional Conditions vulnerability in Quarkus
A flaw was found in the json payload.
network
low complexity
quarkus CWE-755
critical
9.8
2023-12-09 CVE-2023-6394 Missing Authorization vulnerability in multiple products
A flaw was found in Quarkus.
network
low complexity
quarkus redhat CWE-862
critical
9.1
2023-11-15 CVE-2023-5720 Unspecified vulnerability in Quarkus
A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain.
network
low complexity
quarkus
7.5
2023-09-20 CVE-2023-4853 Incorrect Authorization vulnerability in multiple products
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions.
network
high complexity
quarkus redhat CWE-863
8.1