Threats Tagged 'cve-2025-63914'
View all threats tagged with 'cve-2025-63914'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-63914'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-63914 is a medium-severity vulnerability in Cinnamon kotaemon 0.11.0 where the _may_extract_zip function fails to validate the contents of uploaded ZIP files. This allows an attacker with file upload permissions to submit a ZIP bomb, causing excessive resource consumption during decompression and potentially exhausting disk space if extracted data is not cleared. The vulnerability impacts availability but does not affect confidentiality or integrity. Exploitation requires authenticated access but no user interaction beyond upload. The vulnerability could lead to denial of service by making the system unavailable due to resource exhaustion. No known exploits are reported in the wild yet. European organizations using Cinnamon kotaemon, especially those with file upload features exposed internally or externally, should be cautious. Mitigation involves implementing strict ZIP content validation, resource limits during extraction, and ensuring cleanup of extracted files. Join the discussion | CVE Database V5 | 11/24/2025, 00:00:00 UTC Added: 11/24/2025, 19:21:29 UTC |
Showing 1 to 1 of 1 result