CVE-2025-59711 in Biztalk360

Sumário (Inglês)

An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsável

MITRE

Reservar

19/09/2025

Divulgação

03/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
355106	Biztalk360 Upload Travessia de Diretório	22	Não definido	Correção oficial	CVE-2025-59711

Fontes

• MITRE
• NVD
• CVE Details