CVE-2025-32951: io.jmix.rest:jmix-rest (exact versions not specified)

CVE-2025-32951. EPSS 0.00361 (percentile 0.28751), scored 24-Oct-2026. Fixed version: 42b6c00fd0572b8e52ae31afd1babc827a3161a1. Fixed version: 475f40b12b3604844408b756f6e8991a8074fea0. Fixed version: 60fc55de808e5f1a70de8be342814b43c0553e44. Fixed version: 79107528c363c9694f2a1f94ec4d9b891ea9d3d9. Fixed version: 10bcf8389857343eccd4aa1595ccce0416382881. Fixed version: 6a66aa3adb967159a30d703e80403406f4c8f7a2. Fixed version: c589ef4e2b25620770b8036f4ad05f1a6250cb6a. Fixed version: cc97e6ff974b9e7af8160fab39cc5866169daa37. Fixed version: f4e6fb05bd245cf36f3e9319aaa0fcd540d024aa.

Affected technology

io.jmix.rest:jmix-rest · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 25-Oct-2026 01:00 UTC

CCR priority: 0.1 /100 (P5)
CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N · OSV.dev
EPSS: 0.00361 · percentile 0.28751 · 2026-10-24
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-24 16:38:25.544256+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-32951.html