CVE-2021-34360

🗓️ 26 May 2022 07:20:10Reported by qnapType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 57 Views

QNAP Proxy Server CSRF vulnerability fixed in QTS 4.5.x: Proxy Server 1.4.2+, QuTS hero h5.0.0: Proxy Server 1.4.3+, QuTScloud c4.5.6: Proxy Server 1.4.2

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2021-34360	26 May 202218:14	–	circl
CNNVD	QNAP NAS 代理服务器跨站请求伪造漏洞	26 May 202200:00	–	cnnvd
Cvelist	CVE-2021-34360 CSRF Bypass in Proxy Server	26 May 202207:20	–	cvelist
EUVD	EUVD-2021-21020	7 Oct 202500:30	–	euvd
NVD	CVE-2021-34360	26 May 202214:15	–	nvd
Prion	Cross site request forgery (csrf)	26 May 202214:15	–	prion

NVD

Node

qnap nas_proxy_serverRange1.4.0–1.4.2

AND

qnap qtsRange4.5.1–4.5.4.2012

Node

qnap nas_proxy_serverRange1.4.0–1.4.3

AND

qnap quts_heroMatchh5.0.0

Node

qnap nas_proxy_serverRange1.4.0–1.4.2

AND

qnap qutscloudMatchc4.5.6-

[
  {
    "platforms": [
      "QTS 4.5.x"
    ],
    "product": "Proxy Server",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.4.2 ( 2021/12/30 )",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "QuTS hero h5.0.0"
    ],
    "product": "Proxy Server",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.4.3 ( 2022/01/18 )",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "QuTScloud c4.5.6"
    ],
    "product": "Proxy Server",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.4.2 ( 2021/12/30 )",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]