Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-4147 · ADVISORY
• access.redhat.com/security/cve/CVE-2022-4147 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• quarkusio/quarkus · PACKAGE
• quarkus.io/blog/quarkus-2-14-2-final-released · WEB

io.quarkus:quarkus-vertx-http のその他の脆弱性

• CVE-2026-50559高 7.5Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.4.1, 3.27.5, an…
• CVE-2026-39852高 8.2Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and…
• CVE-2023-4853高 8.1A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests…
• CVE-2023-0044中 6.1If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to…