Skip to content
OpenAdvisories

Vendor

Cp0204

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Quark Drive (quark-auto-save) < 0.8.5 Mass Assignment via POST /update

    Quark Drive before 0.8.5 contains a mass assignment vulnerability in the POST /update endpoint that allows authenticated attackers to overwrite administrator credentials by posting an arbitrary webui object to the config_data dictionary. Attackers can exploit…