Vulnerability details

CVE-2025-13700

DreamFactory DreamFactory

DreamFactory saveZipFile Command Injection Remote Code Execution Vulnerability

CVSS 3.0

7.2High

Official description

DreamFactory saveZipFile Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of DreamFactory. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the saveZipFile method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26589.

CVSS scores

Score	Version	Source	Vector
7.2High	3.0	CVEProject cvelistV5 (CNA) (zdi)	`CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
DreamFactory	DreamFactory	7.0.0	CVEProject cvelistV5 (CNA)

References and advisories

https://www.zerodayinitiative.com/advisories/ZDI-25-1024/ x_research-advisory
https://github.com/dreamfactorysoftware/df-core/commit/404a1783927f95999c71a0ff8f14130d385087fb vendor-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-12-24
Last updated: 2025-12-24
State: Published
Assigner (CNA): zdi

Exploit prediction (EPSS)

1.58%

Probability of exploitation in 30 days

75.7%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')