ZOO-Project ZOO-Project

• CVE-2025-25284 High 8.7 Path Traversal and Local File Read via VRT (Virtual Format) in ZOO-Project WPS Implementation 0.6%
• CVE-2025-25190 Medium 5.5 [XBOW-025-033] Cross-Site Scripting (XSS) via EchoProcess Service in ZOO-Project WPS Server 0.6%
• CVE-2025-25189 Medium 5.5 [XBOW-025-031] Reflected Cross-Site Scripting via jobid Parameter in ZOO-Project WPS publish.py CGI Script 0.5%
• CVE-2024-53982 High 8.7 Arbitrary file download in Zoo-Project Echo Example 0.5%