CVE-2025-59711
An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside…
Published: 2026-04-03 · CVSS: 8.3 · CVSS 3.1
An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7