CVE-2025-1846

Name of the Vulnerable Software and Affected Versions zj1983 zz versions up to 2024-8

Description A vulnerability was found in the function deleteLocalFile of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.java of the component File Handler. The manipulation of the argument zids leads to denial of service. The attack can be initiated remotely.

Recommendations For versions up to 2024-8, as a temporary workaround, consider disabling the deleteLocalFile function until a patch is available. Restrict access to the File Handler component to minimize the risk of exploitation. Avoid using the argument zids in the affected function until the issue is resolved.