CVE-2023-5675
MediumAdvisory
Published 25 Apr 2024In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.005
- 39th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 14
- of 17,781 indexed, latest versions
- Container images
- 4
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Quarkus: authorization flaw in quarkus resteasy reactive and classic
Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 4 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| quarkus-resteasy-reactive-commonmaven | 2.12.3.Final, 2.14.3.Final, 3.2.9.Final | 3.2.10.Final | 4 |
| quarkus-resteasy-reactive-common-deploymentmaven | 3.2.9.Final | 3.2.10.Final | 1 |
- OSV records
- GHSA-25w4-hfqg-4r52
Charts affected
14 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| musicocielmusicocielVerified publisher | 0.0.0 | 1 of 3See more | 4,406 |
| eoloPlanteolo-plannerVerified publisher | 0.1.0 | 1 of 7See more | 27,537 |
| eoloplannereoloplannerVerified publisher | 0.1.0 | 1 of 7See more | 32,205 |
| eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher | 0.1.0 | 1 of 7See more | 27,537 |
| eoloplannereoloplanner-molynx-gat | 0.1.0 | 1 of 7See more | 28,482 |
| eoloplanteoloplant | 1.0.0 | 1 of 7See more | 27,537 |
| eoloplantseoloplants-urjcVerified publisher | 0.1.0 | 1 of 7See more | 27,721 |
| servereoloserverVerified publisher | 0.1.0 | 1 of 7See more | 32,205 |
| eoloplanthttpd-eoloplant | 0.1.0 | 1 of 7See more | 32,205 |
| eoloserverihuertas2021-vmartinp2021-helm | 0.1.0 | 1 of 7See more | 27,721 |
| my-app-namemy-app-name | 0.0.2 | 1 of 1See more | 9,149 |
| Practica_4_helmmy-heml-appVerified publisher | 0.1.0 | 1 of 7See more | 27,721 |
| p4p4 | 0.1.0 | 1 of 7See more | 27,537 |
| Practica_4_helmpr04helm | 0.1.0 | 1 of 7See more | 27,558 |
Container images carrying it
4 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| codeurjc/ | 310bea5b1ee7 | quarkus-resteasy-reactive-common | 3.2.10.Final | 8 |
| mastercloudapps/ | f3d24dfe2686 | quarkus-resteasy-reactive-common | 3.2.10.Final | 4 |
| viniciusfcf/ | bba8ee1b5cd5 | quarkus-resteasy-reactive-common | 3.2.10.Final | 1 |
| quay.io/ | 4f72a5b0c076 | quarkus-resteasy-reactive-common quarkus-resteasy-reactive-common-deployment | 3.2.10.Final 3.2.10.Final | 1 |