Non notée
CVE-2019-7197 A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS
Description
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| QNAP NAS devices | Versions non publiées |
Autres CVE de QNAP NAS devices
Les 6 CVE de QNAP NAS devices →
CVE-2019-7183
This improper link resolution vulnerability allows remote attackers to access system files
Non notée
CVE-2019-7193
QNAP QTS Improper Input Validation Vulnerability
9.8
Critique
CVE-2018-0730
This command injection vulnerability in File Station allows attackers to execute commands on the affected device
Non notée
CVE-2018-0729
This command injection vulnerability in Music Station allows attackers to execute commands on the affected device
Non notée