VDB
CVE-2024-48862
CVE-2024-48862
PUBLISHED
CVSS 8.699999809265137 HIGH
A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later
EPSS 0.92% · 58.9th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.92%
58.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| qnap | qulog_center | 1.7.0.0, 1.8.0.0 |
| QNAP Systems Inc. | QuLog Center | 1.7.x.x, 1.8.x.x |
| qnap | qulog_center | 1.7.0.800, 1.8.0.872 |
Timeline
- Nov 22, 2024 CVE Published
- Nov 22, 2024 PoC Published
- Nov 22, 2024 PoC Published
- Nov 22, 2024 CVE Updated
- Nov 23, 2024 EPSS Score
- Nov 24, 2024 Coalition ESS Score
- Nov 26, 2024 PoC Published
- Dec 12, 2024 EPSS Score
- Dec 30, 2024 EPSS Score
- Jan 17, 2025 EPSS Score
- Feb 4, 2025 EPSS Score
- Feb 22, 2025 EPSS Score
References
- https://www.qnap.com/go/security-advisory/qsa-24-47 advisory
- https://www.qnap.com/en/security-advisory/qsa-24-46 url
- https://nvd.nist.gov/vuln/detail/CVE-2024-48862 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-40 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-43 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-36 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-39 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-44 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-46 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-37 advisory