Cpe:2.3:a:zfile:zfile:*:*:*:*:*:*:*:*

ZFile versions through 5.0.5 are vulnerable to a path traversal attack allowing unauthenticated attackers to download arbitrary files via manipulated share link query parameters.