CVE-2025-4529 | Seeyon Zhiyuan OA Web Application System 8.1 SP2 ZIP File M3CoreController.class download Name path traversal
A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\WEB-INF\lib\seeyon-apps-m3.jar!\com\seeyon\apps\m3\core\controller\M3CoreController.class of the component ZIP File Handler. The manipulation of the argument Name leads to path traversal.
This vulnerability is traded as CVE-2025-4529. It is possible to launch the attack remotely. Furthermore, there is an exploit available.