CVE-2021-34360

Name of the Vulnerable Software and Affected Versions QNAP Proxy Server versions prior to 1.4.2 QNAP Proxy Server versions prior to 1.4.3 in QuTS hero h5.0.0 QNAP Proxy Server versions prior to 1.4.2 in QuTScloud c4.5.6

Description A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP devices running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code.

Recommendations For QTS 4.5.x, update Proxy Server to version 1.4.2 or later. For QuTS hero h5.0.0, update Proxy Server to version 1.4.3 or later. For QuTScloud c4.5.6, update Proxy Server to version 1.4.2 or later.