CVE-2023-5720

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-526

Affected software

Vendor	Product	Versions
n/a	gradle-plugin	—

References

https://access.redhat.com/security/cve/CVE-2023-5720Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2245700Issue Tracking, Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-5720Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2245700Issue Tracking, Vendor Advisory

Timeline

Published: Nov 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-57214.3It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient acti CVE-2023-57225.3Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary hea CVE-2023-57235.3An attacker with temporary script access to a site could have set a cookie containing invalid characters using `document.cookie` that could CVE-2023-57247.5Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability af CVE-2023-57254.3A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive use CVE-2023-57264.3A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible CVE-2023-57276.5The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a CVE-2023-57287.5During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable c CVE-2023-57294.3A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen no CVE-2023-57309.8Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption CVE-2023-57319.8Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so CVE-2023-57326.5An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This v