CVE-2022-2466

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-444

Affected software

VendorProductVersions
n/aquarkusquarkus 2.10.3

References

Timeline

Published
Aug 31, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-246607.5The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackersCVE-2022-246617.8A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vCVE-2022-246638.8PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by anCVE-2022-246648.8PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by aCVE-2022-246658.8PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able CVE-2022-246667.5A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 fraCVE-2022-246677.5A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoCVE-2022-246687.5A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This aCVE-2022-246696.5It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internCVE-2022-24679.8A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknownCVE-2022-246706.5An attacker can use the unrestricted LDAP queries to determine configuration entriesCVE-2022-246717.8A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a local attacker to mod
CVE-2022-2466: Critical severity, CVSS 9.8 | Vulnix