Skip to content
OpenAdvisories

Vendor

ZOO-Project

4 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 8.7

    Path Traversal and Local File Read via VRT (Virtual Format) in ZOO-Project WPS Implementation

    The ZOO-Project is an open source processing platform, released under MIT/X11 Licence. A vulnerability in ZOO-Project's WPS (Web Processing Service) implementation allows unauthorized access to files outside the intended directory through path traversal. Spec…

  • High 8.7

    Arbitrary file download in Zoo-Project Echo Example

    ZOO-Project is a C-based WPS (Web Processing Service) implementation. A path traversal vulnerability was discovered in Zoo-Project Echo example. The Echo example available by default in Zoo installs implements file caching, which can be controlled by user-giv…