PT-2025-24290 · Unknown · License Center

Published 2025-06-06 · Updated 2025-12-05 · CVE-2024-50406

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions License Center versions prior to 1.9.49

Description A cross-site scripting (XSS) vulnerability has been reported. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data.

Recommendations For versions prior to 1.9.49, update to version 1.9.49 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-50406

Affected Products

License Center

References · 6

• https://qnap.com/en/security-advisory/qsa-25-11 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-50406 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50406 · Security Note
• https://t.me/cveNotify/144947 · Telegram Post
• https://t.me/cvenotify/125077 · Telegram Post
• https://twitter.com/CVEnew/status/1931037247668736172 · Twitter Post