Qsirch
Monthly
Path traversal in QNAP Qsirch lets remote attackers reach the full-text search application without authentication and read files and system data outside the intended directory structure on the host NAS. The vendor states the flaw is fixed in Qsirch 7.0.3.0 and later, so only NAS devices running an earlier build of this optional app - and exposing its web interface to the attacker's network path - remain at risk; no public exploit code and no confirmed active exploitation were identified at time of analysis. Our independent assessment scores the issue at CVSS 3.1 8.6-class severity on the confidentiality axis (C:H/I:N/A:N), meaning the realistic worst case is read-only disclosure of sensitive files rather than the file modification or service disruption implied by the higher input CVSS 4.0 score of 9.3.
Path traversal in QNAP Qsirch lets remote attackers reach the full-text search application without authentication and read files and system data outside the intended directory structure on the host NAS. The vendor states the flaw is fixed in Qsirch 7.0.3.0 and later, so only NAS devices running an earlier build of this optional app - and exposing its web interface to the attacker's network path - remain at risk; no public exploit code and no confirmed active exploitation were identified at time of analysis. Our independent assessment scores the issue at CVSS 3.1 8.6-class severity on the confidentiality axis (C:H/I:N/A:N), meaning the realistic worst case is read-only disclosure of sensitive files rather than the file modification or service disruption implied by the higher input CVSS 4.0 score of 9.3.