CVE-2020-25724

CVE-2020-25724 describes a flaw in RESTEasy, affecting versions prior to 2.0.0.Alpha3, including various Quarkus and Red Hat RESTEasy products. This vulnerability allows an attacker to gain access to privileged information due to an incorrect HTTP response, primarily impacting confidentiality and integrity. With a CVSS score of 4.3 (Medium), it can be exploited over the network with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.