PT-2021-11962
CVE-2020-36194
·
Published
2021-07-01
·
Updated
2021-07-06
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
QNAP Systems Inc. QTS versions prior to 4.5.2.1566 Build 20210202
QNAP Systems Inc. QuTS hero versions prior to h4.5.2.1638 build 20210414
Description:
A reported issue allows attackers to inject malicious code. This is achieved through an XSS vulnerability.
Recommendations:
For QTS versions prior to 4.5.2.1566 Build 20210202, update to version 4.5.2.1566 Build 20210202 or later.
For QuTS hero versions prior to h4.5.2.1638 build 20210414, update to version h4.5.2.1638 build 20210414 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾