CVE-2023-5720

Katalog CVE

CVSS 7.5 · High EPSS 0,82%

Kerentanan Cleartext Storage of Sensitive Information in an Environment Variable pada quarkus. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application.

Rincian

Terbit di NVD

15 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-526: Cleartext Storage of Sensitive Information in an Environment Variable

EPSS (30 hari)

0,82% peluang dieksploitasi; lebih tinggi dari 55,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2023-5720 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2245700 issue tracking · advisory vendor