CVE-2024-48862

published 2024-11-22

CVE-2024-48862: A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file…

high 8.7 CVSS 4.0

AV N AC L AT N PR N UI P VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files.

We have already fixed the vulnerability in the following versions:
QuLog Center 1.7.0.831 ( 2024/10/15 ) and later
QuLog Center 1.8.0.888 ( 2024/10/15 ) and later

Affected

4 ranges

Vendor	Product	Version range	Fixed in
qnap	qulog_center	>= 1.7.0.800 < 1.7.0.831	1.7.0.831
qnap	qulog_center	>= 1.8.0.872 < 1.8.0.888	1.8.0.888
qnap_systems_inc	qulog_center	>= 1.7.x.x < 1.7.0.831 ( 2024/10/15 )	1.7.0.831 ( 2024/10/15 )
qnap_systems_inc	qulog_center	>= 1.8.x.x < 1.8.0.888 ( 2024/10/15 )	1.8.0.888 ( 2024/10/15 )

CWE-59