Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.
References
| Link | Resource |
|---|---|
| https://jeroscope.com/advisories/2025/jero-2025-007/ | Third Party Advisory |
| https://www.onecommander.com/ | Product |
Configurations
History
11 Dec 2025, 19:13
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Onecommander
Onecommander onecommander |
|
| CPE | cpe:2.3:a:onecommander:onecommander:3.102.0.0:*:*:*:*:*:*:* | |
| References | () https://jeroscope.com/advisories/2025/jero-2025-007/ - Third Party Advisory | |
| References | () https://www.onecommander.com/ - Product |
20 Nov 2025, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-22 |
19 Nov 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-19 21:15
Updated : 2025-12-11 19:13
NVD link : CVE-2025-63371
Mitre link : CVE-2025-63371
CVE.ORG link : CVE-2025-63371
JSON object : View
Products Affected
onecommander
- onecommander
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')