CVE-2023-5720
1 advisory.
Maven/io.quarkus:quarkus-project CVE-2023-5720: high 7.7
Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0.CR1 | - | 3.5.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-p62q-5483-h57v
- https://nvd.nist.gov/vuln/detail/CVE-2023-5720
- https://access.redhat.com/security/cve/CVE-2023-5720
- https://bugzilla.redhat.com/show_bug.cgi?id=2245700
- https://github.com/quarkusio/quarkus
CVE-2023-5720 · published · modified · JSON