CVE-2025-2070

FileZ / Client PUBLISHED

Description (CNA)

An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user.

Affected (CNA)

Vendor / product	Versions
FileZ / Client	affected 0 before 11.0.0.10

CWE

CWE-611

References

https://www.filez.com/securityPolicy/2.html?1744703100

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.