CVE-2023-47639

5.3 mediumEPSS 0.4%

Medium (5.3). EPSS 0.4% chance of exploitation in the next 30 days.

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This vulnerability is fixed in 3.2.5.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-209
Published: 2025-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/api-platform/core/commit/ba8a7e6538bccebf14c228e43a9339214c4d9201
https://github.com/api-platform/core/pull/5823
https://github.com/api-platform/core/security/advisories/GHSA-rfw5-cqjj-7v9r

Check your stack JSON