Cross-Site Request Forgery Vulnerability in QNAP Proxy Server
CVE-2017-7635

8.8HIGH

Key Information:

Vendor
Qnap
Status
Nas Proxy Server
Vendor
CVE Published:
5 June 2018

Summary

The QNAP Proxy Server application prior to version 1.2.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, which allow unauthorized commands to be submitted on behalf of an authenticated user. This could potentially lead to data breaches and unauthorized access to sensitive information, compromising the integrity of user sessions and security of data within the QNAP environment.

References

https://www.qnap.com/en/security-advisory/nas-201806-01
x_refsource_CONFIRM
http://www.securitytracker.com/id/1041025
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.