CVE-2025-59711 in Biztalk360

Resumen (Inglés)

An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsable

MITRE

Reservar

2025-09-19

Divulgación

2026-04-03

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
355106	Biztalk360 Upload recorrido de directorios	22	No está definido	Arreglo oficial	CVE-2025-59711

Fuentes

• MITRE
• NVD
• CVE Details