{"id":"CVE-2023-6393","revision":"7aa5d660175049cf97f59aedfb8b0647","records":[{"revision":"7aa5d660175049cf97f59aedfb8b0647","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-6393","aliases":[],"title":"Quarkus: potential invalid reuse of context when @cacheresult on a uni is used","description":"A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial \"completion\" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains sensitive information, and could allow a malicious user to benefit from a POST request returning the response that is meant for another user, gaining access to sensitive data.","state":0,"publishedAt":"2023-12-06T16:58:54.23+00:00","modifiedAt":"2026-09-29T10:10:07.504+00:00","affected":[{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"quarkus-cache","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat build of Quarkus\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"quarkus-cache\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/a:redhat:quarkus:3\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","score":5.3,"severity":"MEDIUM"}],"references":["https://access.redhat.com/errata/RHSA-2023:7700","https://access.redhat.com/security/cve/CVE-2023-6393","https://bugzilla.redhat.com/show_bug.cgi?id=2253113"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-6393","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-6393","identifiers":["CVE-2023-6393"]},"retained":false,"historicalAffected":[]}],"coverage":[]}