CVE-2024-1979 - CVE House
Back to Database
Status published Low CVE-2024-1979

Quarkus: information leak in annotation

Vulnerability Description

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-1979

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Red Hat build of Quarkus 3.2.11.Final, Red Hat build of Quarkus
Vulnerable Versions:
0, 3.2.11.Final-redhat-00001

Timeline

Official Publish: March 13th, 2024
Last Modified: November 20th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Weaknesses (CWE)