CVE-2025-69601
MEDIUM EPSS 45.7%
Published Jan 28, 20265mo ago · Modified Jun 17, 20261w ago
6.5 CVSS 3.1
Published Jan 28, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago
Description
A directory traversal (Zip Slip) vulnerability exists in the “Static Sites” feature of 66biolinks v44.0.0 by AltumCode. Uploaded ZIP archives are automatically extracted without validating or sanitizing file paths. An attacker can include traversal sequences (e.g., ../) in ZIP entries to write files outside the intended extraction directory. This allows static files (html, js, css, images) file write to unintended locations, or overwriting existing HTML files, potentially leading to content defacement and, in certain deployments, further impact if sensitive files are overwritten.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity High
Availability None
Threat Intelligence
EPSS Exploit Probability
45.7% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-22 Path Traversal Resource Mgmt
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| altumcode | 66biolinks | 44.0.0 | any |
References 1
- gist.github.com https://gist.github.com/Waqar-Arain/9cd59aa74de540eeb3b09d15bac35e36
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.