CVE-2024-50404: Qsync Central
6.8
CVSS
Description
A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations.
We have already fixed the vulnerability in the following versions:
Qsync Central 4.4.0.16_20240819 ( 2024/08/19 ) and later
Classification
CVE ID: CVE-2024-50404
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.8
Affected Products
Vendor: QNAP Systems Inc.
Product: Qsync Central
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)