What is CVE-2025-40718?

CVE-2025-40718 is a high-severity vulnerability in Quiter Quiter_gateway, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 7.5/10. Published 2025-07-08.

How severe is CVE-2025-40718?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Quiter Quiter_gateway

CVE-2025-40718

Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.

EPSS: 0.004 (28.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Quiter Quiter_gateway
Quiter Gateway (Java War On Apache Tomcat) — versions 0

Weakness classification (CWE)

CWE-209 — Generation of Error Message Containing Sensitive Information

References

cve-coordination@incibe.es (Third Party Advisory)

Frequently asked questions

What is CVE-2025-40718?: CVE-2025-40718 is a high-severity vulnerability in Quiter Quiter_gateway, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 7.5/10. Published 2025-07-08.
How severe is CVE-2025-40718?: High severity. CVSS v3 base score is 7.5 out of 10.