CVE-2025-63371

—

CVSS 3.1

7.5 high

EPSS

<1%p51

Published

Nov 19, 2025 (Nov 19, 2025)

Modified

Jun 17, 2026

Description

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

Vendors: onecommander
Products: onecommander
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.