Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hx9j-hf4h-q659

Опубликовано: 08 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network.

We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTScloud c5.1.5.2651 and later

An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network.

We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTScloud c5.1.5.2651 and later

EPSS

Процентиль: 92%
0.08842
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 4.3
nvd
почти 2 года назад

An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTScloud c5.1.5.2651 and later

CVSS3: 4.3
fstec
почти 2 года назад

Уязвимость операционных систем QTS, QuTS Hero, QuTScloud и myQNAPcloud, существующая из-за непринятия мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 92%
0.08842
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-74