Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 5:56 a.m.2 views

CVE-2025-13265

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...

9.1CVSS6.4AI score0.00063EPSS
Exploits1References1
OSV
OSV
added 2025/11/17 6:30 a.m.4 views

GHSA-8WF8-FRJG-XV74 lsFusion Server is vulnerable to Path Traversal through its unpackFile function

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...

6.3CVSS6.9AI score0.00063EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2025/11/17 6:30 a.m.7 views

lsFusion Server is vulnerable to Path Traversal through its unpackFile function

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...

9.1CVSS6.3AI score0.00063EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2025/11/17 6:15 a.m.2 views

CVE-2025-13265

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...

9.1CVSS0.00063EPSS
Exploits1References4
OSV
OSV
added 2025/11/17 6:15 a.m.3 views

CVE-2025-13265

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...

9.1CVSS6.9AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/11/17 5:32 a.m.4 views

CVE-2025-13265 lsfusion platform ZipUtils.java unpackFile path traversal

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...

6.5CVSS6.4AI score0.00063EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/11/17 5:32 a.m.5 views

CVE-2025-13265 lsfusion platform ZipUtils.java unpackFile path traversal

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...

6.5CVSS0.00063EPSS
Exploits1References4
CVE
CVE
added 2025/11/17 5:32 a.m.7 views

CVE-2025-13265

The CVE-2025-13265 entry describes a path-traversal weakness in lsFusion Platform (up to 6.1) affecting ZipUtils.java (file server path: ZipUtils.java, unpackFile function). The underlying issue is improper handling in unpackFile that allows path traversal, and the vulnerability can be triggered ...

9.1CVSS6.6AI score0.00063EPSS
Exploits1References4Affected Software1
EUVD
EUVD
added 2025/11/17 5:32 a.m.2 views

EUVD-2025-197766

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...

6.5CVSS6.5AI score0.00063EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.4 views

PT-2025-47120

Name of the Vulnerable Software and Affected Versions lsfusion platform versions prior to 6.1 Description A flaw exists in the lsfusion platform that allows for path traversal. This issue is related to the unpackFile function located in the file...

6.5CVSS6.3AI score0.00063EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

lsFusion 路径遍历漏洞

lsFusion is an information system development platform based on a declarative open source language from lsfusion Open Source. A path traversal vulnerability exists in lsfusion 6.1 and earlier versions, which stems from incorrect manipulation of the function in the file...

9.1CVSS6.2AI score0.00063EPSS
Exploits1References5
Exploit DB
Exploit DB
added 2016/03/16 12:0 a.m.40 views

Netwrix Auditor 7.1.322.0 - ActiveX 'sourceFile' Stack Buffer Overflow

Netwrix Auditor 7.1.322.0 ActiveX sourceFile Stack Buffer Overflow Vulnerability Vendor: Netwrix Corporation Product web page: http://www.netwrix.com Affected version: 7.1 Build 322 Summary: Netwrix Auditor is an IT audit software that maximizes visibility of IT infrastructure changes and data...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2016/03/16 12:0 a.m.30 views

Netwrix Auditor 7.1.322.0 - ActiveX sourceFile Stack Buffer Overflow

Netwrix Auditor 7.1.322.0 - ActiveX sourceFile Stack Buffer Overflow Netwrix Auditor 7.1.322.0 ActiveX sourceFile Stack Buffer Overflow Vulnerability Vendor: Netwrix Corporation Product web page: http://www.netwrix.com Affected version: 7.1 Build 322 Summary: Netwrix Auditor is an IT audit...

0.9AI score
Exploits0
Packet Storm
Packet Storm
added 2016/03/16 12:0 a.m.33 views

Netwrix Auditor 7.1.322.0 ActiveX (sourceFile) Stack Buffer Overflow

Netwrix Auditor 7.1.322.0 ActiveX sourceFile Stack Buffer Overflow Vulnerability Vendor: Netwrix Corporation Product web page: http://www.netwrix.com Affected version: 7.1 Build 322 Summary: Netwrix Auditor is an IT audit software that maximizes visibility of IT infrastructure changes and data...

0.9AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2016/03/15 12:0 a.m.35 views

Netwrix Auditor 7.1.322.0 ActiveX (sourceFile) Stack Buffer Overflow Vulnerability

Summary Netwrix Auditor is an IT audit software that maximizes visibility of IT infrastructure changes and data access. The product provides actionable audit data about who changed what, when and where and who has access to what. Description The application suffers from a stack-based buffer...

6.4AI score
Exploits0
Rows per page
Query Builder