CVE-2024-2700

CVE-2024-2700 is a high-severity vulnerability in the quarkus-core component of Quarkus, where local environment variables from the Quarkus namespace, set during application build, are inadvertently captured into the resulting application. This can lead to dangerous behavior if these build-time properties, such as database dropping or TLS certificate trust, are not overridden at runtime. The CVSS score of 7.0 (HIGH) indicates a local attack vector with high complexity, potentially leading to high confidentiality, integrity, and availability impacts. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.