Approved changes feed: RSS · Atom
cpe:2.3:a:lsfusion:platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lsfusion (8ed9cfb0-1532-59f4-b68c-f06e57e5319e) |
|---|---|
| Product | Platform (ae09d401-4920-5904-bdf5-389c8c691f9f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lsfusion/platform |
purl2cpe | 2026-06-01 10:14:43.263600 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13265 |
vulnerable | 2026-06-08 07:04:31.880295 |
lsfusion platform ZipUtils.java unpackFile path traversal
MEDIUM (6.3)
A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack remotely.
Published: 2025-11-17T05:32:05.557Z
Updated: 2025-11-17T16:58:09.861Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13262 |
vulnerable | 2026-06-08 07:04:31.876690 |
lsfusion platform UploadFileRequestHandler.java UploadFileRequestHandler path traversal
HIGH (7.3)
A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. Executing manipulation of the argument sid can lead to path traversal. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-11-17T04:02:05.028Z
Updated: 2025-11-17T17:46:41.702Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13261 |
vulnerable | 2026-06-08 07:04:31.874470 |
lsfusion platform DownloadFileRequestHandler.java DownloadFileRequestHandler path traversal
MEDIUM (5.3)
A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java. Performing manipulation of the argument Version results in path traversal. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Published: 2025-11-17T03:32:05.193Z
Updated: 2025-11-17T18:17:54.537Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.