CVE-2025-60786

High · 8.8

CVSS

8.8

EPSS

0.6%

Published

Dec 15, 2025

CISA due date

—

The record

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file.

Affected packages

Ecosystem	Package	Introduced	Fixed