CVE-2018-19948CWE-352

The vulnerability have been reported to affect earlier versions of Helpdesk

Low · published September 11, 2020

CVSS v3.1
2.0
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery (CSRF) vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

The record
Technical detail
CVSS v3.1
2.0 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00296 · 21.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2020-09-11T14:12Z
EPSS history
Timeline
  • 11 SEP 14:12Z
    The vulnerability have been reported to affect earlier versions of Helpdesk
    cvelistv5