PT-2021-8832 · Qnap · Qutscloud+3
Published
2021-04-16
·
Updated
2021-06-21
·
CVE-2018-19942
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
QTS versions prior to 4.5.2.1566 build 20210202
QTS versions prior to 4.5.1.1456 build 20201015
QTS versions prior to 4.3.6.1446 build 20200929
QTS versions prior to 4.3.4.1463 build 20201006
QTS versions prior to 4.3.3.1432 build 20201006
QTS versions prior to 4.2.6 build 20210327
QuTS hero versions prior to h4.5.1.1472 build 20201031
QuTScloud versions prior to c4.5.4.1601 build 20210309
QuTScloud versions prior to c4.5.3.1454 build 20201013
Description
A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability allows remote attackers to inject malicious code.
Recommendations
For QTS versions prior to 4.5.2.1566 build 20210202, update to QTS 4.5.2.1566 build 20210202 or later.
For QTS versions prior to 4.5.1.1456 build 20201015, update to QTS 4.5.1.1456 build 20201015 or later.
For QTS versions prior to 4.3.6.1446 build 20200929, update to QTS 4.3.6.1446 build 20200929 or later.
For QTS versions prior to 4.3.4.1463 build 20201006, update to QTS 4.3.4.1463 build 20201006 or later.
For QTS versions prior to 4.3.3.1432 build 20201006, update to QTS 4.3.3.1432 build 20201006 or later.
For QTS versions prior to 4.2.6 build 20210327, update to QTS 4.2.6 build 20210327 or later.
For QuTS hero versions prior to h4.5.1.1472 build 20201031, update to QuTS hero h4.5.1.1472 build 20201031 or later.
For QuTScloud versions prior to c4.5.4.1601 build 20210309, update to QuTScloud c4.5.4.1601 build 20210309 or later.
For QuTScloud versions prior to c4.5.3.1454 build 20201013, update to QuTScloud c4.5.3.1454 build 20201013 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
File Station
Qts
Quts Hero
Qutscloud