CVE-2025-13647

Multiple WSO2 products are vulnerable to an information disclosure vulnerability due to insufficient validation of the content-type header during request processing. An attacker can submit a crafted request with a manipulated header to expose the file paths for certificate files . This disclosure...