What is CVE-2023-4991?

CVE-2023-4991 is a high-severity vulnerability in Nextbx Qwalerter, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2023-09-15.

How severe is CVE-2023-4991?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Nextbx Qwalerter

CVE-2023-4991

A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file QWAlerter.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. The identifier of this vulnerability is VDB-239804. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS: 0.002 (15.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Nextbx Qwalerter — versions 4.50
Quescom Nextbx_qwalerter — versions 4.50

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

cna@vuldb.com (Permissions Required, technical-description, Third Party Advisory, vdb-entry)
cna@vuldb.com (signature, Permissions Required, Third Party Advisory)

Frequently asked questions

What is CVE-2023-4991?: CVE-2023-4991 is a high-severity vulnerability in Nextbx Qwalerter, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2023-09-15.
How severe is CVE-2023-4991?: High severity. CVSS v3 base score is 7.8 out of 10.