CVE-2024-27123 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-79	Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

참고 자료

https://www.qnap.com/en/security-advisory/qsa-24-54