CVE-2025-29213: Path Traversal

Published Apr 15, 2025

Updated

A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file.

Affected Software

2 affected components

Jeewms JeeWMS

Jeewms JeeWMS=3.7

Event History

Apr 15, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-29213?

CVE-2025-29213 is considered a high severity vulnerability due to its ability to allow attackers to execute arbitrary code.

How do I fix CVE-2025-29213?

To fix CVE-2025-29213, update JEEWMS to version 3.8 or later where the vulnerability has been addressed.

What is a zip slip vulnerability related to CVE-2025-29213?

A zip slip vulnerability like CVE-2025-29213 occurs when an application extracts files from a Zip archive, allowing attackers to manipulate file paths to write files outside the intended directories.

Which version of JEEWMS is affected by CVE-2025-29213?

JEEWMS version 3.7 is affected by CVE-2025-29213.

How can CVE-2025-29213 be exploited by an attacker?

An attacker can exploit CVE-2025-29213 by crafting a malicious Zip file that executes arbitrary code upon extraction in the vulnerable version of JEEWMS.