CVE-2024-12397

Summary

CVE-2024-12397 is a vulnerability affecting Quarkus-HTTP that arises from its incorrect handling of certain value-delimiting characters in incoming cookie requests. This issue poses a significant risk as it enables an attacker to construct a malicious cookie value, potentially leading to the exfiltration of HttpOnly cookie values or the spoofing of arbitrary additional cookie values. The consequences of this vulnerability can result in unauthorized data access or modification, threatening both data confidentiality and integrity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.