ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.

Published Sep 26, 2022 · Updated May 21, 2025 · Assigned by mitre