Beveiligingsadvies

CVE-2026-91144

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-14 21:45:44

Laatst bijgewerkt 2026-09-14 21:45:44

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared base directory, bypassing the intended access restrictions.

← Alle CVE's bekijken Bekijk op cve.org ↗