CVE-2023-0044 (build_of_quarkus, quarkus)

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.

attack authentication cookie cross-site csrf cve disclosure information information disclosure may path prevention quarkus session