SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2025-63371

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.76%

55th percentile - higher than 55% of all known CVEs

Summary

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

Risk Assessment

An attacker can trick a user into opening a crafted ZIP archive, enabling file writes outside the intended directory and potential overwriting of system files.

Recommendation

Update OneCommander to a patched version and exercise caution when extracting ZIP archives from untrusted sources.

Other vulnerabilities in OneCommander

Original NVD description (English source)

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS