CVE-2020-2503
24.12.2020, 02:15
If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
| Vendor | Product | Version |
|---|---|---|
| qnap | qes | 𝑥 < 2.1.1 |
| qnap | qes | 2.1.1 |
| qnap | qes | 2.1.1:build_20200211 |
| qnap | qes | 2.1.1:build_20200303 |
| qnap | qes | 2.1.1:build_20200319 |
| qnap | qes | 2.1.1:build_20200424 |
| qnap | qes | 2.1.1:build_20200515 |
| qnap | qes | 2.1.1:build_20200811 |
𝑥
= Vulnerable software versions