Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2020-2504

Absolute path traversal vulnerability in QES

Description

If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QES

  • unspecified to < 2.1.1affected

References