PT-2025-48538 · Unknown · Softsea Epub File Reader

Published 2025-12-01 · Updated 2025-12-23 · CVE-2025-63365

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SoftSea EPUB File Reader version 1.0.0.0

Description SoftSea EPUB File Reader version 1.0.0.0 contains a flaw related to directory traversal. This issue is present in the EPUB file processing component, specifically when handling and extracting contents from EPUB archives. The vulnerability allows for potential unauthorized access to files and directories.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-63365

Affected Products

Softsea Epub File Reader

References · 7

• https://osv.dev/vulnerability/CVE-2025-63365 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63365 · Security Note
• https://t.me/CVEtracker/38569 · Telegram Post
• https://jeroscope.com/advisories/2025/jero-2025-001 · Note
• https://t.me/cveNotify/146647 · Telegram Post
• http://epub.com · Note
• https://twitter.com/CVEnew/status/1995567920957849604 · Twitter Post