ZOO-Project

Products

ProductCVEsExploitedLatest
ZOO-Project4–Feb 18, 2025

Exploited and recent CVEs

  • CVE-2025-25284 High 8.7 Path Traversal and Local File Read via VRT (Virtual Format) in ZOO-Project WPS Implementation 0.6%
  • CVE-2025-25190 Medium 5.5 [XBOW-025-033] Cross-Site Scripting (XSS) via EchoProcess Service in ZOO-Project WPS Server 0.6%
  • CVE-2025-25189 Medium 5.5 [XBOW-025-031] Reflected Cross-Site Scripting via jobid Parameter in ZOO-Project WPS publish.py CGI Script 0.5%
  • CVE-2024-53982 High 8.7 Arbitrary file download in Zoo-Project Echo Example 0.5%