CVE-2021-38675: Stored XSS Vulnerability in Image2PDF
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 ( 2021/08/17 ) and later
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
QNAP Image2PDFto a version that resolves this vulnerability.Fixed in 2.1.5 ( 2021/08/17 )
Event History
Frequently Asked Questions
What is CVE-2021-38675?
CVE-2021-38675 is a cross-site scripting (XSS) vulnerability that affects QNAP devices running Image2PDF.
What is the severity of CVE-2021-38675?
CVE-2021-38675 has a severity rating of 5.4 (medium).
How does CVE-2021-38675 affect QNAP devices?
CVE-2021-38675 allows remote attackers to inject malicious code into QNAP devices running Image2PDF.
Has CVE-2021-38675 been fixed?
Yes, CVE-2021-38675 has been fixed in Image2PDF version 2.1.5 (released on 2021/08/17).
Where can I find more information about CVE-2021-38675?
You can find more information about CVE-2021-38675 in the QNAP security advisory QSA-21-43.