by Kastro
Paper/Archive/CVE-2022-2466

CVE-2022-2466

redhat — It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 79.8.798 × 2016.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

Affected

ProductAffectedFixed inSource
quarkusquarkus 2.10.3–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgithub.com/quarkusio/quarkus/issues/26748