CVE-2024-50404: Qsync Central
A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations.
We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.1620240819 ( 2024/08/19 ) and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50404?
CVE-2024-50404 is considered a significant security vulnerability due to the potential for unauthorized file system access by remote attackers.
How do I fix CVE-2024-50404?
To fix CVE-2024-50404, update Qsync Central to the latest version beyond 4.4.0.16_20240819.
What are the potential impacts of CVE-2024-50404?
Exploitation of CVE-2024-50404 could allow attackers to navigate the file system and access sensitive data.
Which versions of Qsync Central are affected by CVE-2024-50404?
CVE-2024-50404 affects Qsync Central versions up to 4.4.0.16_20240819.
Who is at risk from CVE-2024-50404?
Users of Qsync Central with prior versions may be at risk if attackers gain user access.