Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-78zt-mzmn-p7hg
Summary
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data.

We have already fixed the vulnerability in the following version:
HBS 3 Hybrid Backup Sync 26.2.0.938 and later
Aliases
0
alias CVE-2025-62840
Fixed_packages
Affected_packages
References
0
reference_url https://www.qnap.com/en/security-advisory/qsa-25-46
reference_id qsa-25-46
reference_type
scores
0
value 7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-05T20:31:32Z/
url https://www.qnap.com/en/security-advisory/qsa-25-46
Weaknesses
0
cwe_id 209
name Generation of Error Message Containing Sensitive Information
description The product generates an error message that includes sensitive information about its environment, users, or associated data.
Exploits
Severity_range_score7.0 - 7.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-78zt-mzmn-p7hg