PT-2022-17036 · Unknown · Qr Code Generator

Published 2022-07-25 · Updated 2022-10-27 · CVE-2022-24992

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QR Code Generator version 5.2.7

Description A vulnerability in the component process.php of QR Code Generator allows attackers to perform directory traversal.

Recommendations For QR Code Generator version 5.2.7, consider restricting access to the process.php component until a patch is available. As a temporary workaround, avoid using the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-24992

Affected Products

Qr Code Generator

References · 7

• 🔥 https://n0lsec.medium.com/qrcdr-path-traversal-vulnerability-bb89acc0c100 · Exploit
• https://osv.dev/vulnerability/CVE-2022-24992 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24992 · Security Note
• https://codecanyon.net/item/qrcdr-responsive-qr-code-generator/9226839 · Note
• https://t.me/cvenotify/34165 · Telegram Post
• http://qrcdr.com · Note
• https://t.me/cibsecurity/46950 · Telegram Post