CVE-2023-5720: 
Java vulnerability analysis and mitigation

A vulnerability (CVE-2023-5720) was discovered in Quarkus, affecting versions from 3.0.0.CR1 through versions prior to 3.2.8. The flaw lies in the improper sanitization of artifacts created using the Gradle plugin, which could expose sensitive build system information (NVD, Red Hat CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) by NIST with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. Red Hat has assigned a slightly higher CVSS score of 7.7 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N. The vulnerability is classified under CWE-526 (Exposure of Sensitive Information Through Environmental Variables) (NVD).

The vulnerability allows attackers to access potentially sensitive information from the build system within the application. This information disclosure could reveal internal configuration details and other sensitive build-related data that should normally be inaccessible (Red Hat CVE).

The vulnerability affects Quarkus versions from 3.0.0.CR1 through versions prior to 3.2.8. Users should upgrade to version 3.2.8 or later to address this security issue (NVD).