CVE-2018-19953

KEV · Ransomware

QNAP NAS File Station Cross-Site Scripting Vulnerability

View CVE record →

Vendor / Project: QNAP
Product: Network Attached Storage (NAS)
Date added: May 24, 2022
Due date: Jun 14, 2022
Known ransomware use: Known
CWEs: CWE-79, CWE-80

Description

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-19953