CVE-2025-1395: CWE-209 Generation of Error Message Containing Sensitive Information in Codriapp Innovation and Software Technologies Inc. HeyGarson
Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted and it was learned that the product is not supported.
AI Analysis
Technical Summary
This vulnerability (CWE-209) in HeyGarson allows an attacker to obtain sensitive information from error messages generated by the application. Such information disclosure can aid attackers in mapping the application and potentially facilitate further attacks. The vulnerability affects HeyGarson version 0. The vendor has confirmed that the product is not supported, and no remediation or patch is provided.
Potential Impact
The vulnerability allows unauthorized users to gain sensitive information from error messages, which can be used to understand the application structure and potentially identify further weaknesses. The CVSS score of 8.2 indicates a high impact on confidentiality with no required privileges or user interaction for exploitation. Integrity impact is low, and availability is not affected.
Mitigation Recommendations
No official fix or patch is available as the product is no longer supported by the vendor. Users should consider discontinuing use of the affected product or implementing compensating controls such as disabling detailed error messages or restricting access to error outputs to trusted users only.
CVE-2025-1395: CWE-209 Generation of Error Message Containing Sensitive Information in Codriapp Innovation and Software Technologies Inc. HeyGarson
Description
Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted and it was learned that the product is not supported.
CVSS v3.1
Score 8.2high
Affected software
Codriapp Innovation and Software Technologies Inc.
HeyGarson
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-209) in HeyGarson allows an attacker to obtain sensitive information from error messages generated by the application. Such information disclosure can aid attackers in mapping the application and potentially facilitate further attacks. The vulnerability affects HeyGarson version 0. The vendor has confirmed that the product is not supported, and no remediation or patch is provided.
Potential Impact
The vulnerability allows unauthorized users to gain sensitive information from error messages, which can be used to understand the application structure and potentially identify further weaknesses. The CVSS score of 8.2 indicates a high impact on confidentiality with no required privileges or user interaction for exploitation. Integrity impact is low, and availability is not affected.
Mitigation Recommendations
No official fix or patch is available as the product is no longer supported by the vendor. Users should consider discontinuing use of the affected product or implementing compensating controls such as disabling detailed error messages or restricting access to error outputs to trusted users only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- TR-CERT
- Date Reserved
- 2025-02-17T12:37:53.583Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 697c728bac06320222401f5d
Added to database: 01/30/2026, 08:57:47 UTC
Last enriched: 08/08/2026, 13:24:55 UTC
Last updated: 09/10/2026, 22:17:05 UTC
Views: 270
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.