cvedb.io
CVE-2025-63371
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2025-11-19T21:15:51.280 · Last modified 2026-06-17T09:53:03.563

Summary

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

Affected products

onecommander — onecommander

Does this affect you?

Add your gear to cvedb and we'll alert you only when onecommander ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.