CVE-2024-27126

A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: Notes Station 3 3.9.6 and later

Score

CVSS 3.1 6.3 Medium

Status

Analyzed - security@qnapsecurity.com.tw

Published

2024-09-06

Last modified

2024-09-06

Weaknesses

CWE-79

Affected products

• Notes Station 3 (Qnap)
• Notes Station 3 (Qnap Systems Inc.)

References

• https://www.qnap.com/en/security-advisory/qsa-24-21