Cross-Site Scripting Vulnerability in QNAP NAS Proxy Server
CVE-2017-7636
6.1MEDIUM
Summary
The Proxy Server application on QNAP NAS devices up to version 1.2.0 is susceptible to a cross-site scripting vulnerability. This flaw enables remote attackers to inject arbitrary web scripts or HTML into web pages viewed by users, potentially compromising user accounts and enabling further malicious actions. Users are advised to upgrade to a patched version and follow best security practices.
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved