Beveiligingsadvies

CVE-2025-1247

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-13 13:26:26
Laatst bijgewerkt 2026-08-04 11:04:21
Toegewezen door redhat
CVSS-score 8.3
Status PUBLISHED

Beschrijving

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information.