ID:11388 - Exploit for Path traversal in Commvault - CVE-2025-34028

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to input validation error when parsing directory traversal characters in .zip files. A remote non-authenticated attacker can upload a specially crafted .zip file that, when expanded, can overwrite arbitrary files on the system, leading to remote code execution.

Remediation