SoftSea EPUB File Reader 1.0.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the EPUB file processing component, specifically in the functionality responsible for extracting and handling EPUB archive contents.
References
| Link | Resource |
|---|---|
| http://epub.com | Broken Link |
| https://jeroscope.com/advisories/2025/jero-2025-001/ | Third Party Advisory |
Configurations
History
23 Dec 2025, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Epubfilereader
Epubfilereader epub File Reader |
|
| References | () http://epub.com - Broken Link | |
| References | () https://jeroscope.com/advisories/2025/jero-2025-001/ - Third Party Advisory | |
| CPE | cpe:2.3:a:epubfilereader:epub_file_reader:1.0.0.0:*:*:*:*:*:*:* |
01 Dec 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| CWE | CWE-22 |
01 Dec 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-01 19:15
Updated : 2025-12-23 13:17
NVD link : CVE-2025-63365
Mitre link : CVE-2025-63365
CVE.ORG link : CVE-2025-63365
JSON object : View
Products Affected
epubfilereader
- epub_file_reader
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')