cve/2023/CVE-2023-0044.md

CVE-2023-0044

Description

If the Quarkus Form Authentication session cookie Path attribute is set to / then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon