io.quarkus/quarkus-resteasy-reactive vulnerabilities

CVEs whose affected-version data names the io.quarkus/quarkus-resteasy-reactive package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2023-5675Medium· 6.5

2y ago

Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.

A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these m…

▾ SunlitRed Hat · quarkus-resteasy-reactiveEPSS 0.46%via CVEORG