{"id":"CVE-2025-58589","aliases":["EUVD-2025-32203","GHSA-4hqg-whc3-m5c5"],"status":"published","title":"Information Disclosure Through Stacktrace","description":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.","severity":{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00361,"percentile":0.3032,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2025-10-06T07:03:41Z","modified":"2026-10-18T21:10:00Z","products":[{"vendor":"sick","product":"baggage_analytics"},{"vendor":"sick","product":"logistic_diagnostic_analytics"},{"vendor":"sick","product":"package_analytics"},{"vendor":"sick","product":"tire_analytics"},{"vendor":"sick ag","product":"baggage analytics"},{"vendor":"sick ag","product":"logistic diagnostic analytics"},{"vendor":"sick ag","product":"package analytics"},{"vendor":"sick ag","product":"tire analytics"}],"references":[{"url":"https://sick.com/psirt","tags":["x_SICK PSIRT Security Advisories","Vendor Advisory"]},{"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","tags":["x_SICK Operating Guidelines","Product"]},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","tags":["x_ICS-CERT recommended practices on Industrial Security","US Government Resource"]},{"url":"https://www.first.org/cvss/calculator/3.1","tags":["x_CVSS v3.1 Calculator","Not Applicable"]},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json","tags":["x_The canonical URL.","Vendor Advisory"]},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58589"},{"url":"https://github.com/advisories/GHSA-4hqg-whc3-m5c5"}],"sources":{"cve":[{"id":"CVE-2025-58589","title":"Information Disclosure Through Stacktrace","description":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.","status":"published","published":"2025-10-06T07:03:41.488Z","modified":"2026-05-13T11:52:23.944Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:32:37.027582Z"}],"euvd":[{"id":"EUVD-2025-32203","description":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.","status":"published","published":"2025-10-06T07:03:41Z","modified":"2026-05-13T11:52:23Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T19:04:34.274348Z"}],"ghsa":[{"id":"GHSA-4hqg-whc3-m5c5","title":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace...","description":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.","status":"published","published":"2025-10-06T09:30:19Z","modified":"2025-10-06T09:30:26Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:03:51.880401Z"}],"nvd":[{"id":"CVE-2025-58589","description":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.","status":"published","published":"2025-10-06T07:15:35.72Z","modified":"2026-10-18T21:10:00.12Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:11:35.93863Z"}]}}