ZOO-Project vulnerabilities
We track 2 vulnerabilities in ZOO-Project products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 18, 2025.
2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score
Latest ZOO-Project vulnerabilities
- 8.7 High severity
ZOO-Project: Improper Limitation of a Pathname to a Restricted Directory
The ZOO-Project is an open source processing platform, released under MIT/X11 Licence. A vulnerability in ZOO-Project's WPS (Web Processing Service) implementation allows unauthorized access to files outside the intended directory through path traversal. Speci
- 8.7 High severity
ZOO-Project: Unrestricted Upload of File with Dangerous Type
ZOO-Project is a C-based WPS (Web Processing Service) implementation. A path traversal vulnerability was discovered in Zoo-Project Echo example. The Echo example available by default in Zoo installs implements file caching, which can be controlled by user-give