← Back

CVE-2018-19942

nvd nist
Published: Apr 16, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 build 20210202 (and later) QTS 4.5.1.1456 build 20201015 (and later) QTS 4.3.6.1446 build 20200929 (and later) QTS 4.3.4.1463 build 20201006 (and later) QTS 4.3.3.1432 build 20201006 (and later) QTS 4.2.6 build 20210327 (and later) QuTS hero h4.5.1.1472 build 20201031 (and later) QuTScloud c4.5.4.1601 build 20210309 (and later) QuTScloud c4.5.3.1454 build 20201013 (and later)

Affected (107)

3 products
Qts
Quts Hero
Qutscloud
Configuration A
107 vulnerable
Vulnerable SoftwareAffected Versions
Qnap
Before 4.2.6
From 4.3.5 to 4.3.6
From 4.4.0 to 4.5.1
Version 4.2.6
Version 4.2.6 build_20170517
Version 4.2.6 build_20190322
Version 4.2.6 build_20190730
Version 4.2.6 build_20190921
Version 4.2.6 build_20191107
Version 4.2.6 build_20200109
Version 4.2.6 build_20200421
Version 4.2.6 build_20200611
Version 4.2.6 build_20200821
Version 4.3.3.0095
Version 4.3.3.0096
Version 4.3.3.0136
Version 4.3.3.0154
Version 4.3.3.0174
Version 4.3.3.0188
Version 4.3.3.0210
Version 4.3.3.0229
Version 4.3.3.0238
Version 4.3.3.0262
Version 4.3.3.0299
Version 4.3.3.0351
Version 4.3.3.0353
Version 4.3.3.0361
Version 4.3.3.0369
Version 4.3.3.0378
Version 4.3.3.0396
Version 4.3.3.0404
Version 4.3.3.0416
Version 4.3.3.0418
Version 4.3.3.0448
Version 4.3.3.0514
Version 4.3.3.0546
Version 4.3.3.0570
Version 4.3.3.0868
Version 4.3.3.0998
Version 4.3.3.1051
Version 4.3.3.1098
Version 4.3.3.1161
Version 4.3.3.1252
Version 4.3.3.1315
Version 4.3.3.1386
Version 4.3.3
Version 4.3.4.0358
Version 4.3.4.0358 beta1
Version 4.3.4.0370
Version 4.3.4.0370 beta1
Version 4.3.4.0372
Version 4.3.4.0372 beta1
Version 4.3.4.0374
Version 4.3.4.0374 beta1
Version 4.3.4.0387
Version 4.3.4.0387 beta2
Version 4.3.4.0411
Version 4.3.4.0416
Version 4.3.4.0427
Version 4.3.4.0434
Version 4.3.4.0435
Version 4.3.4.0451
Version 4.3.4.0483
Version 4.3.4.0486
Version 4.3.4.0506
Version 4.3.4.0516
Version 4.3.4.0526
Version 4.3.4.0551
Version 4.3.4.0557
Version 4.3.4.0561
Version 4.3.4.0569
Version 4.3.4.0593
Version 4.3.4.0597
Version 4.3.4.0604
Version 4.3.4.0899
Version 4.3.4.1029
Version 4.3.4.1082
Version 4.3.4.1190
Version 4.3.4.1282
Version 4.3.4.1368
Version 4.3.4.1417
Version 4.3.4
Version 4.3.6.0895
Version 4.3.6.0907
Version 4.3.6.0923
Version 4.3.6.0944
Version 4.3.6.0959
Version 4.3.6.0979
Version 4.3.6.0993
Version 4.3.6.1013
Version 4.3.6.1033
Version 4.3.6.1070
Version 4.3.6.1154
Version 4.3.6.1218
Version 4.3.6.1263
Version 4.3.6.1286
Version 4.3.6.1333
Version 4.3.6.1411
Version 4.3.6
Version 4.5.1
Version 4.5.2
Qnap
Before h4.5.1
Version h4.5.1
Version h4.5.1
Qnap
Before c4.5.3
Version c4.5.3
Version c4.5.4

References (2)

Source: security@qnapsecurity.com.tw
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.