CVE-2025-13647

The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header. Successful exploitation can lead to the unintended exposure of the file paths for certificate files. This information disclosure could potentially be leveraged in subsequent attacks or compromise the confidentiality of the system.

CVSS v3 5.8 MEDIUM

5.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/

Configurations

No configuration.

History

02 Nov 2026, 10:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-11-02 10:17

Updated : 2026-11-02 20:17

NVD link : CVE-2025-13647

Mitre link : CVE-2025-13647

CVE.ORG link : CVE-2025-13647

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2025-13647", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13647", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-02T19:20:07.726881Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "affectedData": [{"vendor": "WSO2", "product": "WSO2 Identity Server", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.10.0", "versionType": "custom"}, {"status": "affected", "version": "5.10.0", "lessThan": "5.10.0.381", "versionType": "custom"}, {"status": "affected", "version": "5.11.0", "lessThan": "5.11.0.428", "versionType": "custom"}, {"status": "affected", "version": "6.0.0", "lessThan": "6.0.0.255", "versionType": "custom"}, {"status": "affected", "version": "6.1.0", "lessThan": "6.1.0.255", "versionType": "custom"}, {"status": "affected", "version": "7.0.0", "lessThan": "7.0.0.133", "versionType": "custom"}, {"status": "affected", "version": "7.1.0", "lessThan": "7.1.0.41", "versionType": "custom"}, {"status": "affected", "version": "7.2.0", "lessThan": "7.2.0.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking IAM", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.0.0", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.421", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Identity Server as Key Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.10.0", "versionType": "custom"}, {"status": "affected", "version": "5.10.0", "lessThan": "5.10.0.372", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Identity Server Keystore Rest API Commons", "versions": [{"status": "affected", "version": "1.0.82", "lessThan": "1.0.82.25", "versionType": "custom"}, {"status": "affected", "version": "1.0.190", "lessThan": "1.0.190.17", "versionType": "custom"}, {"status": "affected", "version": "1.2.3", "lessThan": "1.2.3.6", "versionType": "custom"}, {"status": "affected", "version": "1.2.23", "lessThan": "1.2.23.10", "versionType": "custom"}, {"status": "affected", "version": "1.2.176", "lessThan": "1.2.176.18", "versionType": "custom"}, {"status": "affected", "version": "1.3.83", "lessThan": "1.3.83.10", "versionType": "custom"}, {"status": "affected", "version": "1.3.213", "lessThan": "1.3.213.1", "versionType": "custom"}, {"status": "unaffected", "version": "1.3.221", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.identity.api.server.keystore.management.common", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Identity Server Keystore Rest API V1", "versions": [{"status": "affected", "version": "1.0.82", "lessThan": "1.0.82.25", "versionType": "custom"}, {"status": "affected", "version": "1.0.190", "lessThan": "1.0.190.17", "versionType": "custom"}, {"status": "affected", "version": "1.2.3", "lessThan": "1.2.3.6", "versionType": "custom"}, {"status": "affected", "version": "1.2.23", "lessThan": "1.2.23.10", "versionType": "custom"}, {"status": "affected", "version": "1.2.176", "lessThan": "1.2.176.18", "versionType": "custom"}, {"status": "affected", "version": "1.3.83", "lessThan": "1.3.83.10", "versionType": "custom"}, {"status": "affected", "version": "1.3.213", "lessThan": "1.3.213.1", "versionType": "custom"}, {"status": "unaffected", "version": "1.3.221", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.keystore.management.v1", "defaultStatus": "unknown"}]}], "published": "2026-11-02T10:17:10.707", "references": [{"url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header.\n\nSuccessful exploitation can lead to the unintended exposure of the file paths for certificate files. This information disclosure could potentially be leveraged in subsequent attacks or compromise the confidentiality of the system."}], "lastModified": "2026-11-02T20:17:22.390", "sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}