CVE-2023-5720
Published: 15 November 2023
Summary
CVE-2023-5720 is a high-severity Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) vulnerability in Quarkus Quarkus. Its CVSS base score is 7.7 (High).
Operationally, ranked in the top 13.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-3004
Vulnerability details
A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within…
more
the application.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.