at.meks.quarkiverse.axonframework-extension:quarkus-axon-jpa-eventstore-deployment (>=0.1.0-quarkus-3.15-RC3 <=0.1.0-quarkus-3.15-RC4), br.com.labbs:quarkus-monitor-reactive-deployment (>=3.15.3 <=3.15.4) +179 more potentially affected by CVE-2025-1247 via io.quarkus.resteasy.reactive:resteasy-reactive-common-processor (>=3.0.0.Alpha1 <=3.15.3)

io.quarkus.resteasy.reactive:resteasy-reactive-common-processor MAVEN version =3.0.0.Alpha1, =0.1.0-quarkus-3.15-RC3, =3.15.3, =24.5.0-alpha4, =24.5.0-alpha4, =24.5.0-alpha4, =2.0.0, =0.34.0, =0.34.0, =2.2.0.CR1, =2.2.0.CR1, =2.2.0.CR1, =0.0.1.CR38, =0.1.0...

CVE-2025-1247 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2025-1247 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2025-1247

creationtimestamp| type| source ---|---|--- 2025-02-13 13:29:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113996817564576205 2025-02-13 14:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2uugq2kr2a 2025-02-13 14:48:23+00:00| seen|...

CVE-2025-1247

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information. Mitigation Mitigation for...