Vulnerabilidades do Red Hat streams for Apache Kafka
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat streams for Apache Kafka: 1 registro(s), com versões afetadas e correções.
CVE-2024-12397
Alta · 7.4
CWE-444 12/12/2024
Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling
A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with
certain value-delimiting characters in incoming requests. This issue could
allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie
values or spoof arbitrary additional cookie values, leading to unauthorized
data access or modification. The main threat from this flaw impacts data
confidentiality and integrity.