CVE-2025-13265

creationtimestamp| type| source ---|---|--- 2025-11-17 05:56:50+00:00| seen| https://bsky.app/profile/potato.software/post/3m5sk3pyjhu2w 2025-11-17 07:40:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5spvkn3vh2s...

CVE-2025-13265 lsfusion platform ZipUtils.java unpackFile path traversal

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack...