mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
109 lines
4.2 KiB
JSON
109 lines
4.2 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "security@qnap.com",
|
|
"ID": "CVE-2018-19953",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "QTS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"platform": "build 20200302",
|
|
"version_affected": "<",
|
|
"version_value": "4.4.2.1231"
|
|
},
|
|
{
|
|
"platform": "build 20200130",
|
|
"version_affected": "<",
|
|
"version_value": "4.4.1.1201"
|
|
},
|
|
{
|
|
"platform": "build 20200214",
|
|
"version_affected": "<",
|
|
"version_value": "4.3.6.1218"
|
|
},
|
|
{
|
|
"platform": "build 20200107",
|
|
"version_affected": "<",
|
|
"version_value": "4.3.4.1190"
|
|
},
|
|
{
|
|
"platform": "build 20200109",
|
|
"version_affected": "<",
|
|
"version_value": "4.3.3.1161"
|
|
},
|
|
{
|
|
"platform": "build 20200109",
|
|
"version_affected": "<",
|
|
"version_value": "4.2.6"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "QNAP Systems Inc."
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"credit": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Independent Security Evaluators"
|
|
}
|
|
],
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109."
|
|
}
|
|
]
|
|
},
|
|
"generator": {
|
|
"engine": "Vulnogram 0.0.9"
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-79 Cross-site Scripting (XSS)"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"refsource": "MISC",
|
|
"url": "https://www.qnap.com/zh-tw/security-advisory/qsa-20-01",
|
|
"name": "https://www.qnap.com/zh-tw/security-advisory/qsa-20-01"
|
|
}
|
|
]
|
|
},
|
|
"source": {
|
|
"discovery": "EXTERNAL"
|
|
}
|
|
} |