CVE-2023-4853

Summary

CVE-2023-4853 is a vulnerability affecting Quarkus, an open-source application platform. The issue lies in the HTTP security policy, which fails to properly sanitize certain character permutations during request acceptance. This flaw can result in incorrect permission evaluations, enabling attackers to bypass the security policy and potentially gain unauthorized access to endpoints. Unauthorized access could lead to data breaches or denial of service attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.