CVE-2023-6393

Summary

CVE-2023-6393 is a vulnerability affecting the Quarkus Cache Runtime. The issue arises when using @CacheResult to cache Unis (units of work). If the processing switches from the request context to a previously cached context while handling a POST request, sensitive information from the cached context could be exposed to unauthorized users. This could potentially result in unintended data access, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.