CVE-2025-13647: Infoleak
The affected component fails to enforce expected validation constraints on the content-type header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated content-type header.
Successful exploitation can lead to the unintended exposure of the file paths for certificate files. This information disclosure could potentially be leveraged in subsequent attacks or compromise the confidentiality of the system.
Event History
Frequently Asked Questions
Does exploiting this issue require authentication or user interaction?
No. The vulnerability is reachable over the network and is rated as requiring no privileges and no user interaction, with low attack complexity.
What is the expected security impact of a successful exploit?
A successful attack can disclose file paths for certificate files. The provided severity vector indicates confidentiality impact only; no integrity or availability impact is identified.