CVE-2025-13647
MEDIUM
NVD
CVSS Score
5.8
Severity
MEDIUM
Published
Nov 02, 2026
Vendor
unknown
Description
The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header. Successful exploitation can lead to the unintended exposure of the file paths for certificate files. This information disclosure could potentially be leveraged in subsequent attacks or compromise the confidentiality of the system.