Skip to content
OpenAdvisories

Product · cuba-platform

jpawebapi

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2025-32961

    CUBA JPA Web API Vulnerable to Cross-Site Scripting (XSS) in the /download Endpoint

    The Cuba JPA web API enables loading and saving any entities defined in the application data model by sending simple HTTP requests. Prior to version 1.1.1, the input parameter, which consists of a file path and name, can be manipulated to return the Content-T…

    cuba-platform jpawebapi com.haulmont.addon.jpawebapi:jpawebapi-jpawebapi Maven