CVE-2021-3914: Red Hat Build Of Quarkus

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.

Affected products

• Red Hat Build Of Quarkus: before 2.7.5 (fixed in 2.7.5); affected versions not specified
• Red Hat Openshift Application Runtimes: version 1.0 only
• Red Hat Smallrye Health: affected versions not specified

Published 2022-08-25. Last modified 2026-06-17.