← Database

CVE-2022-0981

HIGH CVSS: 8.8 Published: 2022-03-23 Modified: 2026-06-17

Description

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended.

Affected Platforms

Quarkus Quarkus

Weakness Type

CWE-863, CWE-863

References