Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-48862

Опубликовано: 22 нояб. 2024
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files.

We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:*
Версия от 1.7.0.800 (включая) до 1.7.0.831 (исключая)
cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:*
Версия от 1.8.0.872 (включая) до 1.8.0.888 (исключая)

EPSS

Процентиль: 78%
0.01149
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 9.8
github
около 1 года назад

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later

EPSS

Процентиль: 78%
0.01149
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-59