Moole Vulnerability Database

Find real vulnerabilities before they ship

Low

CVE-2024-1979

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.

VectorNETWORK

PublishedMar 13, 2024, 10:15

Published Bysecalert@redhat.com

Base Score

Score3.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

io.quarkus:quarkus-kubernetes-deployment(Maven)03.7.3N/A

References

https://access.redhat.com/errata/RHSA-2024:1662
https://access.redhat.com/security/cve/CVE-2024-1979
https://bugzilla.redhat.com/show_bug.cgi?id=2266690
https://github.com/quarkusio/quarkus/issues/38055

Weakness Type

CWE-200

CVSS Metrics

Base Score

3.5

Vector String

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Base SeverityLow

Version

3.1

Attack Vector (AV)

NETWORK