CVE-2025-1846
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Mar 3, 2025
CWE ID 404
Summary
CVE-2025-1846 is a newly disclosed vulnerability affecting the File Handler component in zj1983 zz up to version 2024-8. This issue, located in the deleteLocalFile function of ZfileAction.java, allows for denial of service attacks. The vulnerability can be triggered remotely through manipulation of the zids argument. Unfortunately, the exploit for this vulnerability has already been made public, increasing the risk for potential attacks. Despite early disclosure to the vendor, they have yet to respond or provide a patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Z Z