CVE-2023-5720

Description

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application.

NVD

Severity: HIGH
CVE ID: CVE-2023-5720
CVSS Score: 7.5
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Red Hat, Inc.

Severity: HIGH
CVE ID: CVE-2023-5720
CVSS Score: 7.7
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Refrence: NVDMITRE

Proof Of Concept

miguelc49

Refrence: GitHub

miguelc49

Refrence: GitHub

miguelc49

Refrence: GitHub