CVE-2024-32762

Опубликовано: 06 сент. 2024

Источник: nvd

CVSS3: 8.2

CVSS3: 6.1

EPSS Низкий

Описание

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network.

We have already fixed the vulnerability in the following versions: QuLog Center 1.8.0.872 ( 2024/06/17 ) and later QuLog Center 1.7.0.827 ( 2024/06/17 ) and later

Ссылки

https://www.qnap.com/en/security-advisory/qsa-24-30
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:*

Версия от 1.7.0 (включая) до 1.7.0.827 (исключая)

cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:*

Версия от 1.8.0 (включая) до 1.8.0.872 (исключая)

EPSS

Процентиль: 74%

0.00822

Низкий

8.2 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-3vff-2vjg-jh5h

CVSS3: 8.2

github

больше 1 года назад

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuLog Center 1.8.0.872 ( 2024/06/17 ) and later QuLog Center 1.7.0.827 ( 2024/06/17 ) and later

EPSS

Процентиль: 74%

0.00822

Низкий

8.2 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79