Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
QSAN XEVO - Path Traversal
Vulnerability Description
Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary files without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
QSAN XEVO 路径遍历漏洞
Vulnerability Description
QSAN XEVO是中国QSAN公司的一款闪存数据管理系统。减少重复性任务并提供完整的数据分析。 QSAN XEVO 中存在路径遍历漏洞，该漏洞源于产品的back-end分析函数未能过滤输入数据的特殊字符。攻击者可通过该漏洞在没有权限的情况下下载任意文件。 QSAN XEVO后端分析功能存在路径遍历漏洞，允许远程攻击者可利用该漏洞下载任意文件而无需权限。以下产品及版本受到影响：QSAN XEVO 1.2.0 (build 202007081800) 之前版本。
CVSS Information
N/A
Vulnerability Type
N/A