Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
QTS, QuTS hero
Vulnerability Description
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application data. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later
CVSS Information
N/A
Vulnerability Type
对CRLF序列的转义处理不恰当(CRLF注入)
Vulnerability Title
QNAP Systems QTS和QNAP Systems QuTS hero 代码注入漏洞
Vulnerability Description
QNAP Systems QTS和QNAP Systems QuTS hero都是中国威联通科技（QNAP Systems）公司的产品。QNAP Systems QTS是一个入门操作系统。QNAP Systems QuTS hero是一个操作系统。 QNAP Systems QTS和QNAP Systems QuTS hero存在代码注入漏洞，该漏洞源于CRLF序列中和不当，可能导致远程攻击者修改应用数据。
CVSS Information
N/A
Vulnerability Type
N/A