CVE-2025-1847

CVE-2025-1847 is a critical improper authorization vulnerability affecting zj1983 zz up to version 2024-8. This flaw allows a remote attacker to achieve high impact on confidentiality, integrity, and availability due to unknown processing leading to improper authorization. With a CVSS score of 8.8 (HIGH), the attack requires low privileges and has low attack complexity. Although the exploit has been publicly disclosed, there is no evidence of active exploitation, Metasploit modules, or significant community discussion, and the vendor has not responded to disclosure attempts.