CVE-2025-59711 - Vulnerability Analysis

Overview

Biztalk360 < 11.5 contains a directory traversal vulnerability caused by mishandling of user-provided input in an upload mechanism, letting authenticated attackers write files outside the destination directory and coerce authentication.

Severity & Score

Impact

Authenticated attackers can write files outside intended directories and potentially bypass authentication, risking system compromise.

Mitigation

Upgrade to version 11.5 or later.

References

• https://www.synacktiv.com/en/advisories/remote-code-execution-from-any-domain-account-in-biztalk360

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner