Loading
If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.
Use CWE-79, Quarkus vendor hub and Quarkus product page to widen CVE-2023-0044 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2022-4116, CVE-2024-12225 and CVE-2023-6267 for nearby disclosures in the same product family.