CVE-2018-0716

EPSS 0.8%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

30 nov 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.

Produtos afetados

QNAP · Qsync Central

Referências

https://www.qnap.com/zh-tw/security-advisory/nas-201811-29