Vulnerability Database

315,363

Total vulnerabilities in the database

CVE-2025-63371

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

  • Published: Nov 19, 2025
  • Updated: Nov 21, 2025
  • CVE: CVE-2025-63371
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
onecommander / onecommander 3.102.0.0 3.102.0.0.x