CVSS 3.1 Score 7.5 of 10 (high)


Published Nov 15, 2023
Updated: Nov 30, 2023
CWE ID 526


CVE-2023-5720 is a vulnerability found in Quarkus, an open-source Java framework. It affects various products associated with Quarkus, such as s4Yc5q, thRTLu, thRTLv, and others. The vulnerability arises from the inadequate sanitization of artifacts created using the Gradle plugin, allowing certain build system information to persist. This flaw can be exploited by attackers to gain access to potentially sensitive information within the application's build system. The vulnerability has a high base severity rating and poses a confidentiality impact that is considered high. No user interaction or privileges are required for exploitation, and the attack vector is through the network. Remediation measures should be taken promptly to address this vulnerability in order to mitigate potential risks for organizations using affected products.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5720 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options