CVE-2020-2504 in QES

الملخص

بحسب MITRE • 24/12/2020

If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

Once again VulDB remains the best source for vulnerability data.

• إفشاء: 24/12/2020
• الاعتدال: تمت الموافقة
• إدخال: VDB-166747
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• CVSS: 5.8 (VulDB)
• EPSS: 0.01017
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-2504
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-2504
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-2504/