CRITICAL🇵🇱 Wersja polska

CVE-2022-4116

CVSS 9.8v3.1pub. 2022-11-22upd. 2025-04-29

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Quarkus

    APP
    Quarkus
    < 2.13.52.14.0 – 2.14.2 (excl.)

  • Red Hat Build Of Quarkus

    APP
    Redhat
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2024-12225CRITICAL9.1PL ✓same product

Quarkus WebAuthn: pominięcie uwierzytelnienia przez domyślne endpointy REST

CVE-2022-2466CRITICAL9.8PL ✓same product

Quarkus 2.10.x — brak zakończenia kontekstu nagłówków HTTP (HTTP Request Smuggling)

CVE-2021-26291CRITICAL9.1PL ✓same product

Apache Maven: podążanie za niezaufanymi repozytoriami HTTP (MitM)

CVE-2026-50559HIGH7.5same product

Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1...

CVE-2026-39852HIGH8.8same product

Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3...