CVE-2025-13647

The affected component fails to enforce expected validation constraints on the content-type header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated content-type header. Successful exploitation can lead to the unintended exposure of the file...