CVE-2020-25633

—

CVSS 3.1

5.3 medium

EPSS

1%p66

Published

Sep 18, 2020 (Sep 18, 2020)

Modified

Jun 17, 2026

Description

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.

Vendors: redhat quarkus
Products: resteasy, quarkus
Weakness: CWE-209
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.