Skip to content
fr Sign in
8.3 High

CVE-2025-1247 A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use…

Description

A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information.

Affected products and versions

Product Affected versions Fixed in
Red Hat Build of Apache Camel 4.8 for Quarkus 3.15 Versions not published
Red Hat build of Quarkus 3.15.3.SP1 Versions not published
Red Hat build of Quarkus 3.8.6.SP3 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Build of Apache Camel 4.8 for Quarkus 3.15

The 3 CVEs of Red Hat Build of Apache Camel 4.8 for Quarkus 3.15 →
CVE-2025-2240 Smallrye-fault-tolerance: smallrye fault tolerance 7.5 High CVE-2025-1634 A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are… 7.5 High
Track this CVE