CVE-2025-13647 is a vulnerability where the affected component does not properly validate the content-type header in certain requests. This flaw allows attackers to craft requests with manipulated content-type headers, leading to unintended exposure of file paths for certificate files. The information disclosure could aid attackers in further compromising system confidentiality. The vulnerability has a medium severity with a CVSS score of 5.8.