CVE-2022-0981
A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended.
Références
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- report github.com