CVE-2025-59384High· 7.5▾ TwilightA path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the followin…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following version: Qfiling 3.13.1 and later
qfiling = 3.13.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-59381Medium· 4.9A path traversal vulnerability has been reported to affect several QNAP operating system versions
CVE-2025-59380Medium· 4.9A path traversal vulnerability has been reported to affect several QNAP operating system versions
CVE-2025-33032Medium· 4.9A path traversal vulnerability has been reported to affect several QNAP operating system versions
CVE-2025-30271Medium· 6.5A path traversal vulnerability has been reported to affect several QNAP operating system versions
CVE-2025-30270Medium· 6.5A path traversal vulnerability has been reported to affect several QNAP operating system versions
CVE-2019-6111Medium· 5.9An issue was discovered in OpenSSH 7.9