CVE-2023-4991CWE-428

NextBX QWAlerter QWAlerter.exe unquoted search path

High · published September 15, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file QWAlerter.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. The identifier of this vulnerability is VDB-239804. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.2th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2023-09-15T15:31Z
EPSS history
Timeline
  • 15 SEP 15:31Z
    NextBX QWAlerter QWAlerter.exe unquoted search path
    cvelistv5