PT-2025-17575 · Unknown · Cuba Platform

Knstvk · Published 2025-04-22 · Updated 2025-04-23 · CVE-2025-32959

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CUBA Platform versions prior to 7.2.23

Description The local file storage implementation in CUBA Platform does not restrict the size of uploaded files, allowing an attacker to upload excessively large files. This could cause the server to run out of space and return an HTTP 500 error, resulting in a denial of service.

Recommendations For versions prior to 7.2.23, update to version 7.2.23 to resolve the issue. As a temporary workaround, consider implementing file size restrictions on the local file storage implementation until the patch is applied.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-32959

GHSA-F3GV-CWWH-758M

GHSA-W3MP-6VRJ-875G

Affected Products

Cuba Platform

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32959.json · Exploit
• https://osv.dev/vulnerability/GHSA-f3gv-cwwh-758m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32959 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32959 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-32952 · Security Note
• https://osv.dev/vulnerability/GHSA-w3mp-6vrj-875g · Vendor Advisory
• https://github.com/cuba-platform/cuba/commit/42b6c00fd0572b8e52ae31afd1babc827a3161a1 · Note
• https://github.com/cuba-platform/cuba/security/advisories/GHSA-w3mp-6vrj-875g · Note
• https://github.com/cuba-platform/cuba · Note
• https://github.com/jmix-framework/jmix/commit/c589ef4e2b25620770b8036f4ad05f1a6250cb6a · Note
• https://github.com/jmix-framework/jmix/security/advisories/GHSA-f3gv-cwwh-758m · Note
• https://github.com/jmix-framework/jmix/commit/6a66aa3adb967159a30d703e80403406f4c8f7a2 · Note
• https://github.com/jmix-framework/jmix/commit/cc97e6ff974b9e7af8160fab39cc5866169daa37 · Note
• https://github.com/jmix-framework/jmix/commit/f4e6fb05bd245cf36f3e9319aaa0fcd540d024aa · Note
• https://github.com/jmix-framework/jmix/issues/3804 · Note