CVE-2021-38693

🗓️ 05 May 2022 17:15:09Reported by [email protected]Type

A path traversal vulnerability in QNAP devices allows attackers to read unexpected files and expose sensitive data. Fixed in QuTScloud c5.0.1.1949 and later, QuTS hero h5.0.0.1949 build 20220215 and later, QTS 5.0.0.1986 build 20220324 and later, QTS 4.5.4.1991 build 20220329 and late

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, is related to deficiencies in pathname restriction, which allows attackers to compromise the confidentiality of information.	8 Jul 202200:00	–	bdu_fstec
CNNVD	QNAP 多款产品路径遍历漏洞	5 May 202200:00	–	cnnvd
CVE	CVE-2021-38693	5 May 202216:50	–	cve
Cvelist	CVE-2021-38693 Path Traversal in thttpd	5 May 202216:50	–	cvelist
EUVD	EUVD-2021-25132	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in QNAP QTS, QuTS hero and QuTScloud	6 May 202200:00	–	ncsc
OpenVAS	QNAP QTS Path Traversal Vulnerability (QSA-22-13)	9 May 202200:00	–	openvas
OpenVAS	QNAP QuTS hero Path Traversal Vulnerability (QSA-22-13)	30 May 202200:00	–	openvas
OpenVAS	QNAP QuTScloud Path Traversal Vulnerability (QSA-22-13)	30 May 202200:00	–	openvas
OSV	CVE-2021-38693	5 May 202217:15	–	osv