Vulnerability	Vulnerable Version
H Access Restriction Bypass Affected versions of this package are vulnerable to Access Restriction Bypass when using HTTP security path-based rules to protect HTTP endpoints. This issue allows unauthorized access to secured paths—such as `/a/protected/path` simply by adding an extra slash, like so: `/a/protected//path`. How to fix Access Restriction Bypass? Upgrade `io.quarkus:quarkus-undertow` to version 2.16.11.Final, 3.2.6.Final, 3.3.3 or higher.	[,2.16.11.Final)[3.2.0,3.2.6.Final)[3.3.0,3.3.3)

Access Restriction Bypass

Affected versions of this package are vulnerable to Access Restriction Bypass when using HTTP security path-based rules to protect HTTP endpoints. This issue allows unauthorized access to secured paths—such as /a/protected/path simply by adding an extra slash, like so: /a/protected//path.

How to fix Access Restriction Bypass?

Upgrade io.quarkus:quarkus-undertow to version 2.16.11.Final, 3.2.6.Final, 3.3.3 or higher.

[,2.16.11.Final)[3.2.0,3.2.6.Final)[3.3.0,3.3.3)

Go back to all versions of this package