{"action":"Upgrade org.jboss.resteasy:resteasy-client-microprofile to 3.14.0.Final (3.x) or 4.5.7.Final (4.x) or later.","affected":[{"fixed":"4.5.7.Final","introduced":"4.0.0"},{"fixed":"3.14.0.Final","introduced":"0"}],"component":"org.jboss.resteasy:resteasy-client-microprofile","cve_ids":["CVE-2020-25633"],"ecosystem":"Maven","epss":0.01178,"exploited":false,"fixed_versions":["4.5.7.Final","3.14.0.Final"],"ghsa_id":"GHSA-hr32-mgpm-qf2f","id":"tcs_01M5N91683HBQTZ4ZAHFYZCGHC","modified_at":"2023-11-08T04:03:10.832739Z","published_at":"2021-06-03T23:41:34Z","references":["https://osv.dev/vulnerability/GHSA-hr32-mgpm-qf2f","https://nvd.nist.gov/vuln/detail/CVE-2020-25633","https://github.com/resteasy/Resteasy/pull/2665/commits/13c808b5967242eec1e877edbc0014a84dcd6eb0","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633","https://issues.redhat.com/browse/RESTEASY-2820"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-hr32-mgpm-qf2f#Maven/org.jboss.resteasy:resteasy-client-microprofile","url":"https://osv.dev/vulnerability/GHSA-hr32-mgpm-qf2f"}],"summary":"Generation of Error Message Containing Sensitive Information in RESTEasy client"}