CVE-2018-0711 — Cross-site Scripting in Qnap QTS

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 54.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Qnap QTS
Timeline
PublishedApr 30
Latest updateMay 14

Description

Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5qnap/qtsQTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315 and earlier
▶NVDqnap/qts12 versions+11

🔴Vulnerability Details

2
GHSA
GHSA-hhj6-gg8r-r35g: Cross-site scripting (XSS) vulnerability in QNAP QTS 4↗2022-05-14
▶
CVEList
CVE-2018-0711: Cross-site scripting (XSS) vulnerability in QNAP QTS 4↗2018-04-30
▶
CVE-2018-0711 — Cross-site Scripting in Qnap QTS | cvebase