CVE-2023-41291

MEDIUM 4.9CVE-2023-41291 · Published 26/04/2024 · updated 17/06/2026

In short

CVE-2023-41291 is a MEDIUM (CVSS 4.9) vulnerability affecting qufirewall (qnap).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 38.8% of all vulnerabilities.
Fix: update to 2.4.1 or later.

Package	Affected versions	Patched versions
qufirewall qnap	`< 2.4.1`	`2.4.1`

Description

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: QuFirewall 2.4.1 ( 2024/02/01 ) and later

References

qnap.com/en/security-advisory/qsa-24-17 · Vendor Advisory

More vulnerabilities in qufirewall

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free