Skip to content
OpenAdvisories
Medium · 5.0 CVE-2025-2070 EUVD-2025-12510GHSA-58xr-825m-v3pq

An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url…

Published Apr 25, 2025 · Updated Apr 25, 2025 · Assigned by lenovo

Description

An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user.

Affected products

VendorProductAffectedFixed
FileZ Client < 11.0.0.10 11.0.0.10

References