Multiple Vulnerabilities in Download Station

Summary

Multiple vulnerabilities have been reported to affect Download Station:

• CVE-2025-58463: Relative path traversal vulnerability
  If a remote attacker gains access to an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
• CVE-2025-58465: Cross-site scripting (XSS) vulnerability
  If a remote attacker gains acces to a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerabilities in the following versions:

Recommendation

To fix the vulnerabilities, we recommend updating Download Station to the latest version.

Updating Download Station

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "Download Station" and then press ENTER.
   Download Station appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your Download Station is already up to date.
5. Click OK.
   The system updates the application.