CVE-2021-38681CWE-79

Reflected XSS Vulnerability in Ragic Cloud DB

Medium · published November 20, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security patch from Ragic.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00727 · 53.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-11-20T01:05Z
EPSS history
Timeline
  • 20 NOV 01:05Z
    Reflected XSS Vulnerability in Ragic Cloud DB
    cvelistv5