CVE-2025-58589CWE-200information-disclosure

CVE-2025-58589

Low · published October 6, 2025

CVSS v3.1
2.7
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00361 · 28.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-06T11:15Z
Affected products (4)
ProductVersionsFixed in
sick/baggage_analyticsall versions—
sick/logistic_diagnostic_analyticsall versions—
sick/package_analyticsall versions—
sick/tire_analyticsall versions—
References (6)
EPSS history
Timeline
  • 06 OCT 07:03Z
    Information Disclosure Through Stacktrace
    cvelistv5