Description (CNA)
An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to access restricted data / files. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5166 and later
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| QNAP Systems Inc. / File Station 5 | affected 5.5.x before 5.5.6.5166 |
CWE
CWE-96
References
ADP enrichment
No English description supplied.
No references supplied.