Qnap QuTS hero Cross-site Scripting (CVE-2020-2495)

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 a...

CVE-2020-2495

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 a...

CVE-2020-2495

CVE-2020-2495 is a cross-site scripting (XSS) vulnerability in QNAP QTS/QuTS Hero File Station that could allow remote attackers to inject malicious code. The issue is fixed in multiple newer builds: QuTS hero h4.5.1.1472+ (20201031+), QTS 4.5.1.1456+, QTS 4.4.3.1354+, QTS 4.3.6.1333+, QTS 4.3.4....

CVE-2020-2495 Cross-site scripting vulnerability in QTS and QuTS hero

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 a...