Path Traversal Vulnerability in lsfusion Platform by lsfusion

CVE-2025-13265

What is CVE-2025-13265?

A security weakness has been identified in the lsfusion platform which affects versions up to 6.1. The vulnerability exists within the unpackFile function located in the ZipUtils.java file of the file server. This issue enables an attacker to exploit path traversal, potentially allowing unauthorized access to restricted files through maliciously crafted requests. The nature of the vulnerability facilitates remote exploitation, making it crucial for users to be aware of this risk and act to secure their environment.

References