Medium · published June 17, 2025
CVSS calls it medium at 5.3. It sits in the 99.5th percentile for exploit probability.
A path traversal vulnerability exists in the file dropoff functionality
of ZendTo versions 6.15-7 and prior. This could allow a remote, authenticated attacker to retrieve the files of other ZendTo users, retrieve files on the host
system, or cause a denial of service.