← back
CVE-2022-0981

CVE-2022-0981

EPSS 1.1%CWE-863
A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended.
Affected products
n/a · quarkus

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.redhat.com/show_bug.cgi?id=2062520https://github.com/quarkusio/quarkus/issues/23269