CVE-2025-0332

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-0332

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.

References
Link Resource
https://docs.telerik.com/devtools/winforms/knowledge-base/kb-security-path-traversal-cve-2025-0332 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:progress:telerik_ui_for_winforms:*:*:*:*:*:*:*:*
History

03 Jul 2025, 18:30

Type Values Removed Values Added
CPE cpe:2.3:a:telerik:ui_for_winforms:*:*:*:*:*:*:*:* cpe:2.3:a:progress:telerik_ui_for_winforms:*:*:*:*:*:*:*:*
First Time Progress
Progress telerik Ui For Winforms

21 Feb 2025, 12:03

Type Values Removed Values Added
Summary
  • (es) En Progress® Telerik® UI for WinForms, versiones anteriores a 2025 Q1 (2025.1.211), el uso de una limitación incorrecta de una ruta de destino puede provocar la descompresión del contenido de un archivo en un directorio restringido.
References () https://docs.telerik.com/devtools/winforms/knowledge-base/kb-security-path-traversal-cve-2025-0332 - () https://docs.telerik.com/devtools/winforms/knowledge-base/kb-security-path-traversal-cve-2025-0332 - Vendor Advisory
First Time Telerik ui For Winforms
Telerik
CPE cpe:2.3:a:telerik:ui_for_winforms:*:*:*:*:*:*:*:*

12 Feb 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-12 16:15

Updated : 2025-07-03 18:30

NVD link : CVE-2025-0332

Mitre link : CVE-2025-0332

CVE.ORG link : CVE-2025-0332

JSON object : View

Products Affected

progress

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')