CVE-2022-4116: Quarkus

Critical severity, CVSS 9.8. EPSS: 32.5% chance of exploitation in the next 30 days.

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution.

Affected products

  • Quarkus Quarkus: before 2.13.5 (fixed in 2.13.5); from 2.14.0, before 2.14.2 (fixed in 2.14.2)
  • Red Hat Build Of Quarkus: affected versions not specified

Published 2022-11-22. Last modified 2026-06-17.