CVE-2021-28807
03.06.2021, 03:15
A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Qcenter. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of Qcenter: QTS 4.5.3: Qcenter v1.12.1012 and later QTS 4.3.6: Qcenter v1.10.1004 and later QTS 4.3.3: Qcenter v1.10.1004 and later QuTS hero h4.5.2: Qcenter v1.12.1012 and later QuTScloud c4.5.4: Qcenter v1.12.1012 and later
| Vendor | Product | Version |
|---|---|---|
| qnap | q\'center | 𝑥 < 1.12.1012 |
| qnap | q\'center | 𝑥 < 1.10.1004 |
| qnap | q\'center | 𝑥 < 1.10.1004 |
| qnap | q\'center | 𝑥 < 1.12.1012 |
| qnap | q\'center | 𝑥 < 1.12.1012 |
𝑥
= Vulnerable software versions
References