ZOO-Project code vulnerabilities

ZOO-Project is an open source processing platform from ZOO-Project Open Source. A code issue vulnerability exists in ZOO-Project that stems from not performing input validation and a path traversal vulnerability that allows an attacker to take full control of the files returned in a response...

PT-2024-35994

Name of the Vulnerable Software and Affected Versions: ZOO-Project affected versions not specified Description: A path traversal vulnerability was discovered in the Echo example of ZOO-Project, a C-based WPS Web Processing Service implementation. The Echo example, available by default in Zoo...

CVE-2024-53982: Unrestricted Upload of File with Dangerous Type

ZOO-Project is a C-based WPS Web Processing Service implementation. A path traversal vulnerability was discovered in Zoo-Project Echo example. The Echo example available by default in Zoo installs implements file caching, which can be controlled by user-given parameters. No input validation is...