CVE-2025-1247

—

CVSS 3.1

8.3 high

EPSS

<1%p54

Published

Feb 13, 2025 (Feb 13, 2025)

Modified

Aug 4, 2026

Description

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information.

Weakness: CWE-488
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.