PT-2022-10343
CVE-2021-34360
·
تاريخ النشر
2022-05-26
·
تاريخ التحديث
2022-06-07
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
QNAP Proxy Server versions prior to 1.4.2
QNAP Proxy Server versions prior to 1.4.3 in QuTS hero h5.0.0
QNAP Proxy Server versions prior to 1.4.2 in QuTScloud c4.5.6
Description
A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP devices running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code.
Recommendations
For QTS 4.5.x, update Proxy Server to version 1.4.2 or later.
For QuTS hero h5.0.0, update Proxy Server to version 1.4.3 or later.
For QuTScloud c4.5.6, update Proxy Server to version 1.4.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾