CVE-2017-7635
published 2018-06-05CVE-2017-7635: QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.
PriorityP434high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
0.59%
44.3th percentile
QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| qnap | nas_proxy_server | < 1.3.0 | 1.3.0 |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c8jq-xc6q-xxpf: QNAP NAS application Proxy Server through version 1
ghsa_unreviewed·2022-05-14
CVE-2017-7635 [HIGH] CWE-352 GHSA-c8jq-xc6q-xxpf: QNAP NAS application Proxy Server through version 1
QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.
OSV
SDL 2.0 vulnerabilities
osv·2019-09-30·CVSS 8.8
CVE-2017-2888 SDL 2.0 vulnerabilities
SDL 2.0 vulnerabilities
It was discovered that SDL 2.0 mishandled crafted image files resulting in an
integer overflow. If a user were tricked into opening a malicious file, SDL
2.0 could be caused to crash or potentially run arbitrary code.
(CVE-2017-2888)
It was discovered that SDL 2.0 mishandled crafted image files. If a user were
tricked into opening a malicious file, SDL 2.0 could be caused to crash or
potentially run arbitrary code.
(CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-06-05
Published