Vulnerabilities

TI-2025-18938 CVE-2025-25284

Path Traversal and Local File Read via VRT (Virtual Format) in ZOO-Project WPS Implementation

MEDIUM 47

The ZOO-Project is an open source processing platform, released under MIT/X11 Licence.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00632 Published 2025-02-18 No fix listed CWE-22

TI-2025-18859 CVE-2025-25190

MEDIUM 58

The ZOO-Project is an open source processing platform.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00558 Published 2025-02-10 Fixed in 7a5ae1a CWE-79

TI-2025-18858 CVE-2025-25189

MEDIUM 64

The ZOO-Project is an open source processing platform.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00452 Published 2025-02-10 Fixed in 7a5ae1a CWE-79

TI-2024-36141 CVE-2024-53982

MEDIUM 44

ZOO-Project is a C-based WPS (Web Processing Service) implementation.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0048 Published 2024-12-04 Fixed in 641cb18fec58de43a3468f314e5f8808c560e6d9 CWE-434

TI-2005-02223 CVE-2005-2349 · GHSA-f69c-jr42-246r

LOW 37

Zoo 2.10 has Directory traversal

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01847 Published 2019-10-28 No fix listed CWE-22