CVE-2021-44053

🗓️ 05 May 2022 16:50:23Reported by qnapType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 101 Views

A cross-site scripting vulnerability affecting QNAP device running QTS, QuTS hero, and QuTScloud has been fixed in updated versions

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2021-44053	6 May 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, is related to the lack of protective measures for website structures. This allows attackers to compromise the confidentiality and integrity of information.	8 Jul 202200:00	–	bdu_fstec
Circl	CVE-2021-44053	5 May 202220:36	–	circl
CNNVD	QNAP Systems 多款产品跨站脚本漏洞	5 May 202200:00	–	cnnvd
Cvelist	CVE-2021-44053 Reflected XSS	5 May 202216:50	–	cvelist
EUVD	EUVD-2021-30912	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in QNAP QTS, QuTS hero and QuTScloud	6 May 202200:00	–	ncsc
NVD	CVE-2021-44053	5 May 202217:15	–	nvd
OpenVAS	QNAP QTS Multiple Vulnerabilities (QSA-22-16)	6 May 202200:00	–	openvas
OpenVAS	QNAP QuTS hero Multiple Vulnerabilities (QSA-22-16)	30 May 202200:00	–	openvas

NVD

Node

qnap qtsRange5.0.0.1716–5.0.0.1986

qnap qtsRange4.3.3.0174–4.3.3.1945

qnap qtsRange4.3.4.0899–4.3.4.1976

qnap qtsRange4.3.6.0895–4.3.6.1965

qnap qtsRange4.4.0.0883–4.5.4.1991

qnap qtsMatch4.2.6build_20170517

qnap qtsMatch4.2.6build_20190322

qnap qtsMatch4.2.6build_20190730

qnap qtsMatch4.2.6build_20190921

qnap qtsMatch4.2.6build_20191107

qnap qtsMatch4.2.6build_20200109

qnap qtsMatch4.2.6build_20200421

qnap qtsMatch4.2.6build_20200611

qnap qtsMatch4.2.6build_20200821

qnap qtsMatch4.2.6build_20210327

qnap qtsMatch4.2.6build_20211215

qnap quts_heroRange<h4.5.4.1771

qnap quts_heroRangeh5.0.0.1772–h5.0.0.1986

qnap qutscloudRange<c5.0.1.1998

[
  {
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "4.5.4.1991 build 20220329",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "5.0.0.1986 build 20220324",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h5.0.0.1986 build 20220324",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "h4.5.4.1971 build 20220310",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "QuTScloud",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "c5.0.1.1949",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]