PT-2024-27911

CVE-2024-38272

·

Published

2024-04-17

·

Updated

2025-04-07

Description by

CVSS 4.0
7.1
High
MetricsAV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
Name of the Vulnerable Software and Affected Versions Quick Share versions prior to 1.0.1724.0
Description The issue allows an attacker to bypass the accept file dialog on Quick Share Windows. Normally, the Quick Share Windows app requires user acceptance from the receiving device to send a file when visibility is set to everyone mode or contacts mode.
Recommendations For versions prior to 1.0.1724.0, upgrade to version 1.0.1724.0 or above to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-404: Improper Resource Shutdown or Release
CWE-294: Authentication Bypass by Capture-replay
Related identifiers
CVE-2024-38272
BDU:2025-05014
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com