VYPR
← All advisories
High severity7.7NVD Advisory· Published Nov 15, 2023· Updated Jun 17, 2026

CVE-2023-5720

CVE-2023-5720

Description

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
io.quarkus:quarkus-projectMaven
>= 3.0.0.CR1, <= 3.5.1—

Affected products

5
  • Quarkusio/Quarkus4 versions
    cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*range: >=3.0.1,<3.2.8
    • cpe:2.3:a:quarkus:quarkus:3.0.0:candidate_release1:*:*:*:*:*:*
    • cpe:2.3:a:quarkus:quarkus:3.0.0:candidate_release2:*:*:*:*:*:*
    • (no CPE)
  • ghsa-coords
    pkg:maven/io.quarkus/quarkus-project
    Range: >= 3.0.0.CR1, <= 3.5.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.