| Package | Affected versions | Patched versions |
|---|---|---|
| io.quarkus:quarkus-rest | ≥ 3.16.0.CR1, < 3.18.2≥ 3.9.0.CR1, < 3.15.3.1< 3.8.6.1 | 3.18.23.15.3.13.8.6.1 |
| io.quarkus:quarkus-rest-deployment | ≥ 3.16.0.CR1, < 3.18.2≥ 3.9.0.CR1, < 3.15.3.1< 3.8.6.1 | 3.18.23.15.3.13.8.6.1 |
A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free