CVE-2017-7635

CWE-352 — Cross-Site Request Forgery (CSRF)4 documents4 sources
Severity
8.8HIGH
EPSS
0.2%
top 64.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Qnap NAS Proxy Server
Timeline
PublishedJun 5
Latest updateMay 14

Description

QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-c8jq-xc6q-xxpf: QNAP NAS application Proxy Server through version 1↗2022-05-14
▶
OSV
SDL 2.0 vulnerabilities↗2019-09-30
▶
CVEList
CVE-2017-7635: QNAP NAS application Proxy Server through version 1↗2018-06-05
▶
CVE-2017-7635 (HIGH CVSS 8.8) | QNAP NAS application Proxy Server t | cvebase.io