VYPR

Cuba Rest API

by Haulmont

CVEs (2)

  • CVE-2025-32952MedApr 22, 2025
    risk 0.35cvss 6.5epss 0.01

    Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading…

  • CVE-2025-32951MedApr 22, 2025
    risk 0.35cvss 6.4epss 0.00

    Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if…