What is GHSA-39x8-8q4p-7578?

GHSA-39x8-8q4p-7578 is a security advisory published by GitHub Security Advisories with Medium severity. A path traversal vulnerability has been reported to affect several QNAP operating system versions...

Which CVE IDs does GHSA-39x8-8q4p-7578 cover?

GHSA-39x8-8q4p-7578 covers the following CVE IDs: CVE-2025-30271. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-39x8-8q4p-7578?

GHSA-39x8-8q4p-7578 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-39x8-8q4p-7578MediumCVSS 6.5

A path traversal vulnerability has been reported to affect several QNAP operating system versions...

Vendor

GitHub Security Advisories

Published

August 29, 2025

Last Modified

September 26, 2026

🔗 CVE IDs covered (1)

CVE-2025-30271 →

📋 Description

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-30271
https://www.qnap.com/en/security-advisory/qsa-25-21
https://github.com/advisories/GHSA-39x8-8q4p-7578