CVE-2025-33038 – Qsync Central Path Traversal Vulnerability

CVE ID : CVE-2025-33038

Published : Aug. 29, 2025, 6:15 p.m. | 35 minutes ago

Description : A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version:
Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…