All 4 CVE vulnerabilities found in ZOO-Project, with AI-generated Chinese analysis, references, and POCs.
Vendor: ZOO-Project
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-25284 | Path Traversal and Local File Read via VRT (Virtual Format) in ZOO-Project WPS Implementation CWE-22 | 6.2 | - | 2025-02-18 |
| CVE-2025-25190 | [XBOW-025-033] Cross-Site Scripting (XSS) via EchoProcess Service in ZOO-Project WPS Server CWE-79 | 6.1 | - | 2025-02-10 |
| CVE-2025-25189 | [XBOW-025-031] Reflected Cross-Site Scripting via jobid Parameter in ZOO-Project WPS publish.py CGI Script CWE-79 | 6.1 | - | 2025-02-10 |
| CVE-2024-53982 | Arbitrary file download in Zoo-Project Echo Example CWE-434 | 9.1 | - | 2024-12-04 |
All 4 known CVE vulnerabilities affecting ZOO-Project with full Chinese analysis, references, and POCs where available.