CNNVD-202511-3060 Information
CNNVD ID
CNNVD-202511-3060
Related CVE
- CNNVD Published: 2025-11-30
Description (Chinese)
Scada-LTS是Scada-LTS开源的一个开源、基于 web 的多平台解决方案。 Scada-LTS 2.7.8.1及之前版本存在路径遍历漏洞，该漏洞源于文件br/org/scadabr/vo/exporter/ZIPProjectManager.java中函数Common.getHomeDir存在路径遍历问题。
Description (English)
Scada-LTS is an open source, web-based multi-platform solution for Scada-LTS open source. Scada-LTS 2.7.8.1 and previous versions have path-to-path loop holes, which stem from the problem of path-to-path runs in the central function of file br/org/scadabri/vo/exporter/ZIPProjectManager.java.
Hazard Level
High
Vulnerability Type
路径遍历
Affected Vendor
Scada-LTS
Published
2025-11-30
Last Modified
2026-02-24
References
https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md https://vuldb.com/?ctiid.333795 https://vuldb.com/?submit.690873 https://vuldb.com/?id.333795 https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md#proof-of-concept https://access.redhat.com/security/cve/cve-2025-13791
Share on: