CVE-2023-5720

    Dashboard / Vulnerabilities / CVE-2023-5720

    CVE-2023-5720

    Published: 15 Nov 2023Last Modified: 28 Oct 2026

    Summary: Quarkus: build env information disclosure via gradle plugin

    Details: A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application.

    References: https://access.redhat.com/security/cve/CVE-2023-5720, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5720.json, https://nvd.nist.gov/vuln/detail/CVE-2023-5720, https://bugzilla.redhat.com/show_bug.cgi?id=2245700

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- eef6e01e5d356c31d90af160b91ff08db32d533f
    Fixed -36e8caf2be4cca8ca8759ca30a2bab8d5d35ab63

    Affected versions

    3.0.0-candidate_release1
    3.0.0-candidate_release2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-5720 | CVE-DB