CVE-2024-50404CWE-59

Qsync Central

Medium · published December 6, 2024

CVSS v4.0
6.8
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations.

We have already fixed the vulnerability in the following versions:

Qsync Central 4.4.0.16_20240819 ( 2024/08/19 ) and later

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.01434 · 72.9th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2024-12-06T16:35Z
EPSS history
Timeline
  • 06 DEC 16:35Z
    Qsync Central
    cvelistv5