CVE Catalog

CVE-2024-1979

LowCVSS 3.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.60%

45th percentile - higher than 45% of all known CVEs

Summary

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.

Risk Assessment

The risk is a potential leak of git credentials, which could allow unauthorized access to the repository and compromise the integrity of the source code.

Recommendation

It is recommended to immediately review the CI process configuration for inadvertent credential exposure and rotate git credentials if a leak is suspected.

Original NVD description (English source)

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS