CVE-2025-63371

High · 7.5

CVSS

7.5

EPSS

0.8%

Published

Nov 19, 2025

CISA due date

—

The record

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

Affected packages

Ecosystem	Package	Introduced	Fixed