Command injection

2023-11-1016:15:00

PRIOn knowledge base

www.prio-n.com

os command injection

qumagie

vulnerability

version 2.1.3

nvd

authenticated users

execute commands

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network.

We have already fixed the vulnerability in the following version:
QuMagie 2.1.3 and later

CPENameOperatorVersion
qumagielt2.1.4

CPE	Name	Operator	Version
	qumagie	lt	2.1.4

References

www.qnap.com/en/security-advisory/qsa-23-50