Description
A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | quarkus | quarkus-2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.quarkus:quarkus-vertx-http-deployment | >= 2.14.0, < 2.14.2.Final | 2.14.2.Final | GHSA-g56w-cwg4-hxx9 |
| Maven | io.quarkus:quarkus-vertx-http-deployment | < 2.13.5.Final | 2.13.5.Final | GHSA-g56w-cwg4-hxx9 |
Advisories 2
- WID-SEC-2022-2302 Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
- WID-SEC-2023-0939 Camunda: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 11, 2023