Path Traversal Vulnerability in Zipline by Diced

CVE-2025-71459

What is CVE-2025-71459?

The Zipline application, specifically through version 4.3.2, exhibits a path traversal vulnerability that permits authenticated users to manipulate file uploads. By crafting requests that include traversal sequences within the x-zipline-filename header, attackers may exploit this flaw to write files outside the designated upload directory. This can lead to unauthorized file creation or overwriting, potentially corrupting critical application data or disrupting normal service operations. Users of Zipline should seek to address this vulnerability to safeguard their systems against possible exploitation.

References