CVE-2023-47639CWE-209

API Platform Core can leak exceptions message that may contain sensitive information

Medium · published April 3, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This vulnerability is fixed in 3.2.5.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2025-04-03T16:46Z
EPSS history
Timeline
  • 03 APR 16:46Z
    API Platform Core can leak exceptions message that may contain sensitive information
    cvelistv5