Description
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Enterprise Build of Quarkus | 3.27.1 – ≤ 3.27.5, 3.33.1 – ≤ 3.33.3 | — |
References
- https://www.ibm.com/support/pages/node/7286498 vendor-advisory patch