Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xh38-hrrg-8cjv

Опубликовано: 05 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network.

We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later

A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network.

We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later

EPSS

Процентиль: 61%
0.00417
Низкий

7.5 High

CVSS3

Дефекты

CWE-1321

Связанные уязвимости

CVSS3: 7.5
nvd
около 2 лет назад

A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later

CVSS3: 7.5
fstec
около 2 лет назад

Уязвимость операционных систем QTS и QuTS hero сетевых устройств Qnap, связанная с неконтролируемым изменением атрибутов прототипа объекта, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 61%
0.00417
Низкий

7.5 High

CVSS3

Дефекты

CWE-1321