Description
A path traversal vulnerability exists in the file dropoff functionality
of ZendTo versions 6.15-7 and prior. This could allow a remote, authenticated attacker to retrieve the files of other ZendTo users, retrieve files on the host
system, or cause a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ZendTo | ZendTo | < 6.15-8 | 6.15-8 |
References
- https://horizon3.ai/attack-research/attack-blogs/cve-2025-34508-another-file-sharing-application-another-path-traversal/ third-party-advisory technical-description exploit
- https://www.vulncheck.com/advisories/zendto-path-traversal third-party-advisory