Quanta Computer QOCA aim AI Medical Cloud Platform Path Traversal Vulnerability

A path traversal vulnerability has been identified in the QOCA aim AI Medical Cloud Platform developed by Quanta Computer. This vulnerability allows authenticated remote attackers to read folder names under a specified path by exploiting an absolute path traversal issue. The vulnerability affects QOCA aim versions 2.7.5 and earlier.

Impact

Exploitation of this vulnerability could lead to unauthorized access to directory names, potentially allowing attackers to navigate the file system and access sensitive information.

Remediation

Users are advised to update to QOCA aim version 2.7.6 or later.