CVE-2025-25284

The ZOO-Project is an open source processing platform, released under MIT/X11 Licence. A vulnerability in ZOO-Project's WPS (Web Processing Service) implementation allows unauthorized access to files outside the intended directory through path traversal. Specifically, the Gdal_Translate service, when processing VRT (Virtual Format) files, does not properly validate file paths referenced in the VRTRasterBand element, allowing attackers to read arbitrary files on the system. The vulnerability exists because the service doesn't properly sanitize the SourceFilename parameter in VRT files, allowing relative path traversal sequences (../). When combined with VRT's raw data handling capabilities, this allows reading arbitrary files as raw binary data and converting them to TIFF format, effectively exposing their contents. This vulnerability is particularly severe because it allows attackers to read sensitive system files, potentially exposing configuration data, credentials, or other confidential information stored on the server. An unauthenticated attacker can read arbitrary files from the system through path traversal, potentially accessing sensitive information such as configuration files, credentials, or other confidential data stored on the server. The vulnerability requires no authentication and can be exploited remotely through the WPS service. This issue has been addressed in commit `5f155a8` and all users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-22

• https://github.com/ZOO-Project/ZOO-Project/commit/5f155a8
• https://github.com/ZOO-Project/ZOO-Project/security/advisories/GHSA-8c27-wmvv-3p38

Published

Feb 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-25279Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3…7.5
• CVE-2025-2528Improper authorization in application password policy in Dev…3.6
• CVE-2025-25280Buffer overflow vulnerability exists in FutureNet AS series …5.3
• CVE-2025-25281An attacker may modify the URL to discover sensitive informa…7.5
• CVE-2025-25282RAGFlow is an open-source RAG (Retrieval-Augmented Generatio…8.1
• CVE-2025-25283parse-duraton is software that allows users to convert a hum…7.5
• CVE-2025-25285@octokit/endpoint turns REST API endpoints into generic requ…5.3
• CVE-2025-25286Crayfish is a collection of Islandora 8 microservices, one o…9.8
• CVE-2025-25287Lakeus is a simple skin made for MediaWiki. Starting in vers…4.7
• CVE-2025-25288@octokit/plugin-paginate-rest is the Octokit plugin to pagin…5.3
• CVE-2025-25289@octokit/request-error is an error class for Octokit request…5.3
• CVE-2025-2529Applications using affected versions of Ehcache 3.x can expe…3.7