Description (CNA)
A path traversal vulnerability exists in the file dropoff functionality of ZendTo versions 6.15-7 and prior. This could allow a remote, authenticated attacker to retrieve the files of other ZendTo users, retrieve files on the host system, or cause a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ZendTo / ZendTo | affected 0 before 6.15-8 |
CWE
CWE-22
References
- https://horizon3.ai/attack-research/attack-blogs/cve-2025-34508-another-file-sharing-application-another-path-traversal/
- https://www.vulncheck.com/advisories/zendto-path-traversal
ADP enrichment
No English description supplied.
No references supplied.