CVE-2023-0044

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information…

published February 23, 2023

CVSS
—
EPSS
1%
Percentile
45.2
In the wild
Unconfirmed
What it is

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00550 · 45.2th percentile
Published
2023-02-23T00:00Z
EPSS history
Timeline
  • 23 FEB 00:00Z
    If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information…
    cvelistv5