Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2024-27125

Helpdesk

Description

A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. Helpdesk

Default version status: unaffected

  • 3.3.x to < 3.3.1affected

References