PT-2026-1098
CVE-2025-59384
·
Published
2026-01-02
·
Updated
2026-10-14
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Qfiling versions prior to 3.13.1
Description
A path traversal issue exists in Qfiling that could allow remote attackers to read the contents of unexpected files or system data. Approximately 3257k+ instances are potentially exposed. The vulnerability allows access to files outside the intended directory through manipulation of file paths.
Recommendations
Update Qfiling to version 3.13.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾