CVE-2025-40718CWE-209
Improper error handling vulnerability in Quiter Gateway
Medium · published July 8, 2025
What it is
Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.
The record
Technical detail
- CVSS v4.0
- 6.9 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00426 · 35.8th percentile
- Weakness
- CWE-209 · Generation of Error Message Containing Sensitive Information
- Published
- 2025-07-08T11:41Z
EPSS history
Timeline