CVE-2017-7641

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*

Information

Published : 2018-03-08 06:29

Updated : 2018-03-27 10:16


NVD link : CVE-2017-7641

Mitre link : CVE-2017-7641


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

qnap

  • qts
  • media_streaming_add-on