VYPR
← All advisories
Medium severity4.3NVD Advisory· Published May 26, 2021· Updated Jun 17, 2026

CVE-2020-25724

CVE-2020-25724

Description

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.jboss.resteasy:resteasy-bomMaven
< 2.0-beta-22.0-beta-2

Affected products

6
  • Quarkusio/Quarkus
    cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*
    Range: <1.11.2
  • Red Hat/Resteasy3 versions
    cpe:2.3:a:redhat:resteasy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:resteasy:*:*:*:*:*:*:*:*range: <2.0.0
    • cpe:2.3:a:redhat:resteasy:2.0.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:redhat:resteasy:2.0.0:alpha2:*:*:*:*:*:*
  • RESTEasy/RESTEasydescription
  • ghsa-coords
    pkg:maven/org.jboss.resteasy/resteasy-bom
    Range: < 2.0-beta-2

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.