VYPR

Jmix Framework

by Haulmont

Source repositories

CVEs (3)

  • CVE-2025-32952MedApr 22, 2025
    risk 0.35cvss 6.5epss 0.01

    Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading…

  • CVE-2025-32951MedApr 22, 2025
    risk 0.35cvss 6.4epss 0.00

    Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if…

  • CVE-2025-32950MedApr 22, 2025
    risk 0.35cvss 6.5epss 0.01

    Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix application is deployed, provided the…