Vulnerabilidades de Zdir
CVEs publicadas que afetam produtos de Zdir: 1 registro(s), com severidade, exploração e correções.
CVE-2025-66945
Crítica · 9.1
CWE-787 03/03/2026
Out-of-bounds Write em Zdir
A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x. When a crafted ZIP archive is processed by the backend at /api/extract, files may be written outside the intended directory, leading to arbitrary file overwrite and potentially remote code execution