Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8p34-xr7p-88q2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc. QuTS hero versions prior to h4.5.1.1582 build 20210217.

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc. QuTS hero versions prior to h4.5.1.1582 build 20210217.

EPSS

Процентиль: 86%
0.02747
Низкий

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
больше 4 лет назад

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc. QuTS hero versions prior to h4.5.1.1582 build 20210217.

EPSS

Процентиль: 86%
0.02747
Низкий

Дефекты

CWE-78