PT-2024-33250 · Unknown · Qulog Center

Dinh Ho Anh Khoa · Published 2024-11-22 · Updated 2025-12-08 · CVE-2024-48862

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QuLog Center versions prior to 1.7.0.831 QuLog Center versions prior to 1.8.0.888

Description A link following vulnerability has been reported to affect QuLog Center, allowing remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files.

Recommendations For QuLog Center versions prior to 1.7.0.831, update to version 1.7.0.831 or later. For QuLog Center versions prior to 1.8.0.888, update to version 1.8.0.888 or later.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2024-48862

Affected Products

Qulog Center

References · 8

• https://qnap.com/en/security-advisory/qsa-24-46 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48862 · Security Note
• https://osv.dev/vulnerability/CVE-2024-48862 · Vendor Advisory
• https://t.me/cveNotify/145163 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1861858661599007024 · Twitter Post
• https://twitter.com/CveFindCom/status/1859991506955755571 · Twitter Post
• https://t.me/latest_high_impact_cve/1543 · Telegram Post
• https://twitter.com/CVEnew/status/1859985377605345525 · Twitter Post