EUVD-2025-211234

The affected component fails to enforce expected validation constraints on the content-type header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated content-type header. Successful exploitation can lead to the unintended exposure of the file...

CVE-2025-13647

Multiple WSO2 products are vulnerable to an information disclosure vulnerability due to insufficient validation of the content-type header during request processing. An attacker can submit a crafted request with a manipulated header to expose the file paths for certificate files . This disclosure...