PT-2025-17931 · Unknown · Filez Client

Published 2025-04-25 · Updated 2025-04-25 · CVE-2025-2070

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FileZ client (affected versions not specified)

Description An improper XML parsing issue was reported in the FileZ client, which could allow arbitrary file reads on the system if a crafted URL is visited by a local user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2025-2070

Affected Products

Filez Client

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-2070 · Security Note
• https://t.me/cvedetector/23759 · Telegram Post
• https://t.me/cvetracker/22391 · Telegram Post
• https://filez.com/securityPolicy/2.html?1744703100 · Note
• https://twitter.com/CVEnew/status/1915795553998496153 · Twitter Post