CVE-2024-12087

CVE-2024-12087 is a path traversal vulnerability in rsync, affecting various Linux distributions and products like QNAP NAS. It arises from improper symlink verification when using the --inc-recursive option, allowing a malicious rsync server to write files outside the client's intended directory. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity that can lead to high integrity impact, allowing arbitrary file writes. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered significant community discussion and media coverage, suggesting awareness within the cybersecurity community.