CVE-2025-0332

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Feb 12, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-03338.8A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/roleCVE-2025-03348.8A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData ofCVE-2025-03359.8A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2025-03369.8A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of theCVE-2025-03376.5ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulneCVE-2025-03396.1A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the filCVE-2025-03409.8A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an uCVE-2025-03419.8A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this iCVE-2025-03425.4A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknCVE-2025-03437.5Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itseCVE-2025-03448.8A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData ofCVE-2025-03458.8A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sy
CVE-2025-0332: Critical severity, CVSS 9.8 | Vulnix