Cross-Site Scripting Vulnerability in QNAP Photo Station
CVE-2024-32770

Currently unrated

Key Information:

Vendor

QNAP
Vendor
CVE Published:
22 November 2024

What is CVE-2024-32770?

A cross-site scripting (XSS) vulnerability has been identified in QNAP's Photo Station, enabling remote attackers with authenticated user access to inject and execute malicious scripts. This flaw poses a security risk, potentially leading to unauthorized access to sensitive information or system compromise. Users are encouraged to update to the latest version, Photo Station 6.4.3 or later, to mitigate this vulnerability. For further details, refer to QNAP's security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.qnap.com/en/security-advisory/qsa-24-39

Timeline

  • Vulnerability published

JSON
.