Lucene search
+L

30 matches found

RedHat Linux
RedHat Linux
added 2025/02/27 3:15 p.m.11 views

io.quarkus:quarkus-rest: Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information...

8.3CVSS5.8AI score0.00775EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/02/27 1:16 p.m.11 views

io.quarkus:quarkus-rest: Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information...

8.3CVSS5.8AI score0.00775EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/13 3:31 p.m.7 views

GHSA-PHG3-GV66-Q38X Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information...

8.3CVSS5.8AI score0.00775EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2025/02/13 3:31 p.m.36 views

Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information...

8.3CVSS6.6AI score0.00775EPSS
SaveExploits0References12Affected Software2
NVD
NVD
added 2025/02/13 2:16 p.m.14 views

CVE-2025-1247

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information...

8.3CVSS0.00775EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/02/13 1:26 p.m.34 views

CVE-2025-1247 Io.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instance

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information...

8.3CVSS0.00775EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/13 1:26 p.m.8 views

CVE-2025-1247 Io.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instance

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information...

8.3CVSS7.1AI score
SaveExploits0References10
CVE
CVE
added 2025/02/13 1:26 p.m.292 views

CVE-2025-1247

CVE-2025-1247 affects Quarkus REST: a flaw where request parameters leak between concurrent requests when endpoints use field injection without a CDI scope. Root cause is shared per-request data in fields; attackers could manipulate data, impersonate users, or access sensitive information. Mitiga...

8.3CVSS6.8AI score0.00775EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/02/13 1:26 p.m.8 views

CVE-2025-1247 Io.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instance

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information...

8.3CVSS6.8AI score0.00775EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/02/12 9:57 a.m.8 views

CVE-2025-1247

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information. Mitigation Mitigation for...

8.3CVSS8.1AI score0.00775EPSS
SaveExploits0References3
Rows per page
Query Builder