CVE-2019-7185 — n/a / QNAP NAS devices running Music Station

Description (CNA)

This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.

Affected (CNA)

Vendor / product	Versions
n/a / QNAP NAS devices running Music Station	affected QTS 4.4.1: Music Station before version 5.3.5, QTS 4.3.6 - QTS 4.4.0: Music Station before version 5.2.7, QTS 4.3.0 - QTS 4.3.4: Music Station before version 5.1.11

CWE

No CWE identifiers supplied.

References

https://www.qnap.com/zh-tw/security-advisory/nas-201911-27

ADP enrichment

CVE

No English description supplied.

https://www.qnap.com/zh-tw/security-advisory/nas-201911-27