{"action":"Upgrade io.quarkus:quarkus-cache to 3.2.9.Final (3.2.x) or 3.5.2 (3.5.x) or later.","affected":[{"fixed":"3.5.2","introduced":"3.3.0.CR1"},{"fixed":"3.2.9.Final","introduced":"3.2.0.CR1"}],"component":"io.quarkus:quarkus-cache","cve_ids":["CVE-2023-6393"],"ecosystem":"Maven","epss":0.00636,"exploited":false,"fixed_versions":["3.5.2","3.2.9.Final"],"ghsa_id":"GHSA-xfv5-jqgp-vqhj","id":"tcs_01M5N9J85H2AR7M88PCXGP2P3T","modified_at":"2024-08-02T15:49:25.262550Z","published_at":"2023-12-06T18:31:05Z","references":["https://osv.dev/vulnerability/GHSA-xfv5-jqgp-vqhj","https://nvd.nist.gov/vuln/detail/CVE-2023-6393","https://github.com/quarkusio/quarkus/issues/37078","https://github.com/quarkusio/quarkus/pull/37077","https://github.com/quarkusio/quarkus/commit/d9ace85caec2d8497b1a2c48b8d52bb163f04adf","https://access.redhat.com/errata/RHSA-2023:7700","https://access.redhat.com/security/cve/CVE-2023-6393","https://bugzilla.redhat.com/show_bug.cgi?id=2253113","https://github.com/quarkusio/quarkus"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xfv5-jqgp-vqhj","url":"https://osv.dev/vulnerability/GHSA-xfv5-jqgp-vqhj"}],"summary":"Quarkus Cache Runtime exposes sensitive information to an unauthorized actor"}