CVE-2025-58589

LowCVSS 2.7

Published: 06/10/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

When an error occurs in the application, a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.

Risk Assessment

Disclosure of internal application information can help an attacker conduct further attacks, such as code injection or privilege escalation. This may lead to a security breach.

Recommendation

Configure the application to not display full stacktraces to users in production. Instead, show a generic error message and log details in logs accessible only to administrators.

Other vulnerabilities in Aplikacja

CVE-2023-3253Medium
An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application.

Original NVD description (English source)

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS