Cross-site Scripting Vulnerability in Multimedia Console
CVE-2020-2493

6.1MEDIUM

Key Information:

Vendor: QNAP
Status: Multimedia Console
Vendor: CVE Published:; 7 December 2020

What is CVE-2020-2493?

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Multimedia Console < 1.1.5

References

https://www.qnap.com/en/security-advisory/qsa-20-14

x_refsource_CONFIRM

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Dec 7, 2020
Vulnerability Reserved
Dec 9, 2019

Credit

Jan Hoff

JSON

QNAP