CVE-2023-0833

Published September 27th, 2023

View on NVD ↗

CVSS v3

4.7

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.

square/okhttp

Square’s meticulous HTTP client for the JVM, Android, and GraalVM.

GitHub

47K