CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It may lead to a denial-of-service condition.
CVE
CVE-2023-4853
Severity
HIGH
CVSS
8.1
EPSS
1.21%
Original NVD Description
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)