CVE-2025-29213

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-04-15 · updated 2026-06-17
Weakness: CWE-22

Description

A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file.

Affected products

Jeewms: 3.7

References

https://github.com/wy876/cve/issues/7

Get alerted when CVE-2025-29213 or the next vulnerability affects your stack