CVE-2017-7632: XSS
Published Mar 27, 2018
·Updated
Cross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML.
Affected Software
2 affected components
QNAP QTS=4.2.6
QNAP QTS=4.3.3
Event History
Mar 27, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-7632?
CVE-2017-7632 is a medium severity vulnerability due to its potential for remote exploitation via cross-site scripting.
2
How do I fix CVE-2017-7632?
To fix CVE-2017-7632, update your QNAP QTS firmware to the latest version provided by QNAP.
3
What systems are affected by CVE-2017-7632?
CVE-2017-7632 affects QNAP QTS versions 4.2.6 and 4.3.3 and earlier builds.
4
Can CVE-2017-7632 lead to data theft?
Yes, CVE-2017-7632 can lead to data theft if an attacker successfully injects malicious scripts.
5
How can CVE-2017-7632 be exploited?
CVE-2017-7632 can be exploited by remote attackers injecting arbitrary web scripts or HTML into the File Station.