Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2022-2466

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

VectorNETWORK

PublishedAug 31, 2022, 16:15

Published Bysecalert@redhat.com

Base Score

Score9.8

Package (Ecosystem)IntroducedFixedLimit

io.quarkus:quarkus-core-parent(Maven)2.10.02.10.4N/A

CWE-444

Base Score

9.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK