Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-32959

Good to know:

icon

Date: April 22, 2025

CUBA Platform is a high level framework for enterprise applications development. Prior to version 7.2.23, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in version 7.2.23. A workaround is provided on the Jmix documentation website.

Severity Score

Related Resources (8)

https://github.com/jmix-framework/jmix/security/advisories/GHSA-f3gv-cwwh-758m
https://github.com/cuba-platform/cuba/commit/42b6c00fd0572b8e52ae31afd1babc827a3161a1
https://docs.jmix.io/jmix/files-vulnerabilities.html
https://docs.jmix.io/jmix/files-vulnerabilities.html#disable-files-endpoint-in-cuba-application
https://github.com/cuba-platform/cuba
https://github.com/cuba-platform/cuba/security/advisories/GHSA-w3mp-6vrj-875g
https://nvd.nist.gov/vuln/detail/CVE-2025-32959
https://www.mend.io/vulnerability-database/CVE-2025-32959

Severity Score

Weakness Type (CWE)

Allocation of Resources Without Limits or Throttling

CWE-770

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/cuba-platform/cuba.git - 7.2.23

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us