hawtio_hawtio vulnerabilities

CVEs whose affected-version data names the hawtio_hawtio package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-12397High· 7.4

1y ago

A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests

A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoo…

▾ TwilightRed Hat · Cryostat 4 on RHEL 9EPSS 0.84%via NVD