← CVE Intelligence

CVE-2021-38681

Reflected XSS Vulnerability in Ragic Cloud DB PUBLISHED

Description (CNA)

A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security patch from Ragic.

Affected (CNA)

Vendor / productVersions
Negocios / Ragic Cloud DBaffected unspecified through 3.7.0.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.