CVE-2018-0716

2018-11-3014:00:00

qnap

www.cve.org

EPSS

0.001

Percentile

45.3%

JSON

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.

CNA Affected

[
  {
    "product": "Qsync Central",
    "vendor": "QNAP",
    "versions": [
      {
        "status": "affected",
        "version": "QTS 4.2.6 build 20180711, QTS 4.3.3 Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5 Qsync Central 3.0.4 and earlier versions"
      }
    ]
  }
]

References

www.qnap.com/zh-tw/security-advisory/nas-201811-29

EPSS

0.001

Percentile

45.3%

JSON

Related for CVELIST:CVE-2018-0716