CVE-2021-32509 — QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc function
Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link followin…
Published: 2021-07-07 · CVSS: 6.5 · CVSS 3.1
Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7