CVE-2024-50404

🗓️ 06 Dec 2024 16:35:52Reported by qnapType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 59 Views🌐 WEB

Link following vulnerability in Qsync Central allows file system traversal by remote attackers.

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for CVE-2024-50404	13 Jan 202509:47	–	githubexploit
Circl	CVE-2024-50404	6 Dec 202416:51	–	circl
CNNVD	QNAP Systems Qsync Central 后置链接漏洞	6 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-50404 Qsync Central	6 Dec 202416:35	–	cvelist
NVD	CVE-2024-50404	6 Dec 202417:15	–	nvd
OSV	CVE-2024-50404	6 Dec 202417:15	–	osv
Packet Storm	Qsync Central Path Traversal / Information Disclosure	13 Jan 202500:00	–	packetstorm
Positive Technologies	PT-2024-34179	6 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-50404	23 May 202506:49	–	redhatcve
Vulnrichment	CVE-2024-50404 Qsync Central	6 Dec 202416:35	–	vulnrichment

NVD

Node

qnap qsync_centralRange4.4.0–4.4.0.16

[
  {
    "defaultStatus": "unaffected",
    "product": "Qsync Central",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "4.4.0.16_20240819 ( 2024/08/19 )",
        "status": "affected",
        "version": "4.4.x.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
qnap	www.qnap.com/en/security-advisory/qsa-24-48

Parameter	Position	Path	Description	CWE
upload_root_dir	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
func	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
sid	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
dest_path	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
path_mode	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
extract_file	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
pwd	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
code_page	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
overwrite	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59
dest_path	request body	cgi-bin/filemanager/utilRequest.cgi	ZIP upload with symlink traversal leading to reading target file (e.g., /etc/passwd).	CWE-59

17 Jun 2026 08:04Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18.8

CVSS 46.8

EPSS0.01394

SSVC

CWE-59