PT-2025-9256 · Zj1983 · Zj1983

Caigo · Published 2025-03-03 · Updated 2025-03-03 · CVE-2025-1846

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions zj1983 zz versions up to 2024-8

Description A vulnerability was found in the function deleteLocalFile of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.java of the component File Handler. The manipulation of the argument zids leads to denial of service. The attack can be initiated remotely.

Recommendations For versions up to 2024-8, as a temporary workaround, consider disabling the deleteLocalFile function until a patch is available. Restrict access to the File Handler component to minimize the risk of exploitation. Avoid using the argument zids in the affected function until the issue is resolved.

Exploit

Fix

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2025-1846

Affected Products

Zj1983

References · 11

• 🔥 https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-1846 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1846 · Vendor Advisory
• https://t.me/cvedetector/19299 · Telegram Post
• https://twitter.com/CVEnew/status/1896399726431404355 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1896433049195176177 · Twitter Post
• https://t.me/cvenotify/113206 · Telegram Post
• https://t.me/cvenotify/113043 · Telegram Post
• https://vuldb.com/?submit.505097 · Note
• https://vuldb.com/?ctiid.298114 · Note
• https://vuldb.com/?id.298114 · Note