Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2023-5720

Quarkus: build env information disclosure via gradle plugin

Description

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a gradle-plugin

Default version status: affected

References