{
  "cveId": "CVE-2020-25633",
  "url": "https://patchblox.com/security/cve/CVE-2020-25633",
  "summary": "CVE-2020-25633 is fixed in 2 products on 1 platform, first by libresteasy-java 3.6.2-2ubuntu0.20.04.1~esm1, released October 8, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libresteasy-java: A flaw was found in RESTEasy client in all versions of RESTEasy up to4.5.6.Final",
  "description": "A flaw was found in RESTEasy client in all versions of RESTEasy up to4.5.6.Final. It may allow client users to obtain the server\u0027s potentiallysensitive information when the server got WebApplicationException from theRESTEasy client call. The highest threat from this vulnerability is to dataconfidentiality.",
  "published": "2020-09-18T12:15:00Z",
  "severity": "Medium",
  "epss": 0.01178,
  "epssPercentile": 0.67834,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.2-2ubuntu0.20.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.20.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libresteasy-java-3.6.2-2ubuntu0.20.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.6.2-2ubuntu0.22.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.22.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libresteasy-java-3.6.2-2ubuntu0.22.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.6.2-2ubuntu0.24.04.1~esm1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.24.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libresteasy-java-3.6.2-2ubuntu0.24.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3.6.2-2ubuntu0.24.10.1",
      "fix": "libresteasy-java 3.6.2-2ubuntu0.24.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libresteasy-java-3.6.2-2ubuntu0.24.10.1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy-java",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "3.6.2-3ubuntu0.25.04.1",
      "fix": "libresteasy-java 3.6.2-3ubuntu0.25.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libresteasy-java-3.6.2-3ubuntu0.25.04.1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.26-1~18.04.1~esm1",
      "fix": "libresteasy3.0-java 3.0.26-1~18.04.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libresteasy3.0-java-3.0.26-1-18.04.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.0.26-1ubuntu0.1~esm1",
      "fix": "libresteasy3.0-java 3.0.26-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libresteasy3.0-java-3.0.26-1ubuntu0.1-esm1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.0.26-3ubuntu0.1",
      "fix": "libresteasy3.0-java 3.0.26-3ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libresteasy3.0-java-3.0.26-3ubuntu0.1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.0.26-6ubuntu0.24.04.1",
      "fix": "libresteasy3.0-java 3.0.26-6ubuntu0.24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libresteasy3.0-java-3.0.26-6ubuntu0.24.04.1",
      "released": "2024-10-08T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3.0.26-6ubuntu0.24.10.1",
      "fix": "libresteasy3.0-java 3.0.26-6ubuntu0.24.10.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libresteasy3.0-java-3.0.26-6ubuntu0.24.10.1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libresteasy3.0-java",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "3.0.26-6ubuntu0.25.04.1",
      "fix": "libresteasy3.0-java 3.0.26-6ubuntu0.25.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libresteasy3.0-java-3.0.26-6ubuntu0.25.04.1",
      "released": "2026-01-16T01:42:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}