CVE-2023-47639 | THREATINT

Description

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This vulnerability is fixed in 3.2.5.

Reserved 2023-11-07 | Published 2025-04-03 | Updated 2025-04-03 | Assigner GitHub_M

MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-209: Generation of Error Message Containing Sensitive Information

Product status

>= 3.2.0, < 3.2.5

affected

References

github.com/...m/core/security/advisories/GHSA-rfw5-cqjj-7v9r

github.com/api-platform/core/pull/5823

github.com/...ommit/ba8a7e6538bccebf14c228e43a9339214c4d9201

cve.org (CVE-2023-47639)

nvd.nist.gov (CVE-2023-47639)

Download JSON