CVE-2026-73101Critical· 10.0▾ MidnightGeneration of Error Message Containing Sensitive Information vulnerability in Apache Juneau. The REST server sends the internal exception class and message to clients in a "Thrown" response header on every error response, and can includ…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 55 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau.
The REST server sends the internal exception class and message to clients in a "Thrown" response header on every error response, and can include internal exception messages in the error body, even when stack-trace rendering is disabled. This reveals implementation details to remote clients.
This issue affects Apache Juneau: through 9.2.0.
Users are recommended to upgrade to version 9.2.1, which fixes the issue.
org.apache.juneau:juneau-rest-server. < 9.2.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-73099Critical· 10.0Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override
CVE-2026-101259Medium· 5.3Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer Exceptions
CVE-2026-85246Medium· 5.3Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions
CVE-2026-85257Medium· 5.3Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions
CVE-2026-85315Medium· 5.3Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions
CVE-2025-8852Medium· 4.3A vulnerability was identified in WuKongOpenSource WukongCRM 11.0