Back to Database
Status published
Medium
CVE-2023-47639
API Platform Core can leak exceptions message that may contain sensitive information
Vulnerability Description
API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This vulnerability is fixed in 3.2.5.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-47639
Credits & Attribution
No credits recorded in the NVD database.
References
More from api-platform
View All →CVE-2025-31485
GraphQL grant on a property might be cached with different objects
High
7.5
CVE-2025-31481
GraphQL query operations security can be bypassed
High
7.5
CVE-2025-23204
GraphQl securityAfterResolver not called
Medium
4.4
CVE-2023-25575
Secured properties in API Platform Core may be accessible within collections
High
7.7
CVE-2019-1000011
API Platform version from 2.2.0 to 2.3.5 contains an Incorrect...
Medium
6.5
Affected Vendor
api-platform
View all reports →Affected Software
core
Vulnerable Versions:
>= 3.2.0, < 3.2.5
Timeline
Official Publish:
April 3rd, 2025
Last Modified:
April 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N