If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
References
Link | Resource |
---|---|
https://www.qnap.com/zh-tw/security-advisory/qsa-20-17 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: qnap
Published: 2020-12-23T00:00:00
Updated: 2020-12-31T16:33:28
Reserved: 2019-12-09T00:00:00
Link: CVE-2020-2503
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-12-24T02:15:12.547
Modified: 2020-12-28T15:33:59.797
Link: CVE-2020-2503
JSON object: View
Redhat Information
No data.