CVE-2021-20289CWE-209

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final

published March 26, 2021

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01400 · 72.3th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2021-03-26T16:28Z
EPSS history
Timeline
  • 26 MAR 16:28Z
    A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final
    cvelistv5