CVE-2021-28807

Post-Authentication Reflected XSS Vulnerability in Q'center

Severity Score

5.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of Q’center: QTS 4.5.3: Q’center v1.12.1012 and later QTS 4.3.6: Q’center v1.10.1004 and later QTS 4.3.3: Q’center v1.10.1004 and later QuTS hero h4.5.2: Q’center v1.12.1012 and later QuTScloud c4.5.4: Q’center v1.12.1012 and later

Se ha reportado una vulnerabilidad de tipo XSS reflejada después de la autenticación que afecta los NAS de QNAP que ejecuta Q'center. Si es explotada, esta vulnerabilidad permite a atacantes remotos inyectar código malicioso. QNAP ya ha corregido esta vulnerabilidad en las siguientes versiones de Q'center: versiones QTS 4.5.3: Q'center v1.12.1012 y posteriores, versión QTS 4.3.6: Q'center v1.10.1004 y posteriores, versión QTS 4.3.3: Q'center v1.10.1004 y posteriores, versión QuTS hero h4.5.2: Q'center v1.12.1012 y posteriores, versión QuTScloud c4.5.4: Q'center v1.12.1012 y posteriores

*Credits: Andrea Cappa

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2021-03-18 CVE Reserved
2021-06-03 CVE Published
2023-03-08 EPSS Updated
2024-09-16 CVE Updated
2024-09-16 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (3)

URL	Tag	Source

URL	Date	SRC
https://www.shielder.it/advisories/qnap-qcenter-post-auth-remote-code-execution-via-qpkg	2024-09-16
https://www.shielder.it/advisories/qnap-qcenter-virtual-stored-xss	2024-09-16

URL	Date	SRC

URL	Date	SRC
https://www.qnap.com/zh-tw/security-advisory/qsa-21-20	2021-09-14

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Qnap Search vendor "Qnap"	Q\'center Search vendor "Qnap" for product "Q\'center"	< 1.12.1012 Search vendor "Qnap" for product "Q\'center" and version " < 1.12.1012"	-	Affected	in	Qnap Search vendor "Qnap"	Qts Search vendor "Qnap" for product "Qts"	4.5.3 Search vendor "Qnap" for product "Qts" and version "4.5.3"	-	Safe
Qnap Search vendor "Qnap"	Q\'center Search vendor "Qnap" for product "Q\'center"	< 1.10.1004 Search vendor "Qnap" for product "Q\'center" and version " < 1.10.1004"	-	Affected	in	Qnap Search vendor "Qnap"	Qts Search vendor "Qnap" for product "Qts"	4.3.3 Search vendor "Qnap" for product "Qts" and version "4.3.3"	-	Safe
Qnap Search vendor "Qnap"	Q\'center Search vendor "Qnap" for product "Q\'center"	< 1.10.1004 Search vendor "Qnap" for product "Q\'center" and version " < 1.10.1004"	-	Affected	in	Qnap Search vendor "Qnap"	Qts Search vendor "Qnap" for product "Qts"	4.3.6 Search vendor "Qnap" for product "Qts" and version "4.3.6"	-	Safe
Qnap Search vendor "Qnap"	Q\'center Search vendor "Qnap" for product "Q\'center"	< 1.12.1012 Search vendor "Qnap" for product "Q\'center" and version " < 1.12.1012"	-	Affected	in	Qnap Search vendor "Qnap"	Quts Hero Search vendor "Qnap" for product "Quts Hero"	h4.5.2 Search vendor "Qnap" for product "Quts Hero" and version "h4.5.2"	-	Safe
Qnap Search vendor "Qnap"	Q\'center Search vendor "Qnap" for product "Q\'center"	< 1.12.1012 Search vendor "Qnap" for product "Q\'center" and version " < 1.12.1012"	-	Affected	in	Qnap Search vendor "Qnap"	Qutscloud Search vendor "Qnap" for product "Qutscloud"	c4.5.4 Search vendor "Qnap" for product "Qutscloud" and version "c4.5.4"	-	Safe