Vulnerabilities CVE-2025-1247

CVE-2025-1247

High

Open

TLP:CLEAR

Io.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instance

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information.

Details

CVSS Score: 8.3
EPSS Score ⓘ: 0.76%

52.1th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Confidence: 90%
Published: Feb 13, 2025
Last Modified: Aug 4, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.