CVE-2021-34361

MEDIUM

QNAP NAS Proxy Server < 1.4.2 - Cross-Site Scripting

Title source: llm
STIX 2.1

Description

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.qnap.com/en/security-advisory/qsa-22-04

Scores

CVSS v3 5.3
EPSS 0.0035
EPSS Percentile 57.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-79
Status published
Products (1)
qnap/nas_proxy_server < 1.4.2
Published Feb 25, 2022
Tracked Since Feb 18, 2026