CVE-2021-32516

HIGH

QSAN Storage Manager < 3.3.3 - Path Traversal via Share Link

Title source: llm
STIX 2.1

Description

Path traversal vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.twcert.org.tw/tw/cp-132-4872-fcfa4-1.html

Scores

CVSS v3 7.5
EPSS 0.0167
EPSS Percentile 73.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
qsan/storage_manager < 3.3.3
Published Jul 07, 2021
Tracked Since Feb 18, 2026