CVE-2024-32770
Photo Station
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
22 nov 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code.
We have already fixed the vulnerability in the following version:
Photo Station 6.4.3 ( 2024/07/12 ) and later
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
Productos afectados
QNAP Systems Inc. · Photo Station¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →