CVE-2025-53513
Zip slip vulnerability in Juju
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Zip slip vulnerability in Juju
The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on the controller to upload a charm. Uploading a malicious charm that exploits a Zip Slip vulnerability could allow an attacker to gain access to a machine running a unit through the affected charm.
Reserved 2025-07-02 | Published 2025-07-08 | Updated 2025-07-09 | Assigner canonicalCWE-24: Path Traversal: '../filedir'
github.com/juju/juju/security/advisories/GHSA-24ch-w38v-xmh8
Support options
