CVE-2024-27125

Helpdesk PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later

Affected (CNA)

Vendor / product	Versions
QNAP Systems Inc. / Helpdesk	affected 3.3.x before 3.3.1

CWE

CWE-79

References

https://www.qnap.com/en/security-advisory/qsa-24-29

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.