ZIV IDF and ZLF Products Code Injection Vulnerability

A code injection vulnerability has been identified in ZIV's IDF version 0.10.0-0C03-03 and ZLF version 0.10.0-0C03-04. This vulnerability allows an authenticated attacker to store malicious payloads that will be executed in the context of the victim's browser. Exploitation requires higher-than-view permissions and the execution of specific commands.

Impact

Exploitation of this vulnerability allows for code injection, where malicious payloads can be executed in the victim's browser.

Remediation

ZIV has released a patch for this vulnerability in IDF and ZLF version 1.1.0.