Skip to content
OpenAdvisories
Unscored CVE-2017-13072 EUVD-2017-4590GHSA-9jm2-65cq-2572

Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223…

Published Jun 21, 2018 · Updated Sep 16, 2024 · Assigned by qnap

Vendor: QNAP Systems Product: App Center in QTS

Description

Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code.

Affected products

VendorProductAffectedFixed
QNAP App Center in QTS App Center in QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions —

References