FileZ Client Improper XML Parsing Vulnerability Allowing Arbitrary File Reads
Vulnerability
A vulnerability has been identified in the FileZ client, specifically in versions prior to 11.1.0.10. This vulnerability arises from improper XML parsing, which could enable arbitrary file reads on the system if a local user visits a crafted URL.
Impact
Exploitation of this vulnerability could lead to unauthorized access to files on the user's system.
Remediation
Users are advised to update the FileZ client to version 11.1.0.10 or above.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
3.0remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.