Maven/io.quarkiverse.cxf:quarkus-cxf CVE-2024-9621: medium 5.3, EPSS 0.52%
Quarkus CXF logs passwords and other secrets
Action: Upgrade io.quarkiverse.cxf:quarkus-cxf to 3.15.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.15.2 | - |
Fixed versions
| 3.15.2 |
Sources
- osv: GHSA-jqh2-ch7p-xwxh
- https://nvd.nist.gov/vuln/detail/CVE-2024-9621
- https://github.com/quarkiverse/quarkus-cxf/issues/1533
- https://github.com/quarkiverse/quarkus-cxf/commit/8ed72cab8db8e5659e294b05529d2b45557859bd
- https://access.redhat.com/errata/RHSA-2024:10035
- https://access.redhat.com/security/cve/CVE-2024-9621
- https://bugzilla.redhat.com/show_bug.cgi?id=2317130
- https://docs.quarkiverse.io/quarkus-cxf/dev/release-notes/3.15.2.html
- https://github.com/quarkiverse/quarkus-cxf
CVE-2024-9621 · published · modified · JSON