What is CVE-2017-13072?

CVE-2017-13072 is a medium-severity vulnerability in QNAP App Center In Qts, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2018-06-21.

How severe is CVE-2017-13072?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in QNAP App Center In Qts

CVE-2017-13072

Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (52.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Qnap App Center In Qts — versions App Center in QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions
Qnap Qts — versions 4.2.6, 4.3.3, 4.3.4

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@qnapsecurity.com.tw (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-13072?: CVE-2017-13072 is a medium-severity vulnerability in QNAP App Center In Qts, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2018-06-21.
How severe is CVE-2017-13072?: Medium severity. CVSS v3 base score is 6.1 out of 10.