CVE-2025-63371: Onecommander

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

Affected products

Published 2025-11-19. Last modified 2026-06-17.