PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2021-20289

CVE-2021-20289

resteasy: Error message exposes endpoint class information

Loading…

Severity

Low

Red Hat Product Security

5.3

CVSS 3.1

Review impact separately from score.

Published · March 3, 2021

Updated · October 12, 2026

Description

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-209 · Generation of Error Message Containing Sensitive Information