CVE-2025-60786

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2025-12-15

Last modified

2026-10-07

Weaknesses

CWE-22

Affected products

• Icescrum (Kagilum)

References

• https://www.icescrum.com/download/
• https://zdaylabs.com/CVE-2025-60786.html