Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: FileZ Clear all filters
TI-2025-01808 CVE-2025-2070 · GHSA-58xr-825m-v3pq

XML external entity injection in FileZ Client

Priority LOW 22

An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00145 Published 2025-04-25 Fixed in 11.0.0.10 CWE-611
TI-2025-01807 CVE-2025-2069 · GHSA-2ww5-c4rg-76jh

Cross-site scripting in FileZ Client

Priority LOW 25

A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00194 Published 2025-04-25 Fixed in 11.0.0.10 CWE-79
TI-2025-01806 CVE-2025-2068 · GHSA-6mpj-6mgp-p7v6

Open redirect in FileZ Client

Priority LOW 22

An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user.

CVSS 4.0MEDIUM 5.1 Local Low privileges User interaction EPSS 0.00148 Published 2025-04-25 Fixed in 11.0.0.10 CWE-601