A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later QuTS hero h5.0.0: Proxy Server 1.4.3 ( 2022/01/18 ) and later QuTScloud c4.5.6: Proxy Server 1.4.2 ( 2021/12/30 ) and later
More Stories
USN-7442-1: Ruby vulnerabilities
It was discovered that the Ruby CGI gem incorrectly handled parsing certain cookies. A remote attacker could possibly use this...
pgbouncer-1.24.1-1.el9
FEDORA-EPEL-2025-be9d8a1131 Packages in this update: pgbouncer-1.24.1-1.el9 Update description: Update to 1.24.1, fixes CVE-2025-2291. Read More
pgbouncer-1.24.1-2.el8
FEDORA-EPEL-2025-f59a1a28d0 Packages in this update: pgbouncer-1.24.1-2.el8 Update description: Update to 1.24.1, fixes CVE-2025-2291. Read More
pgbouncer-1.24.1-2.fc40
FEDORA-2025-31397c2b6c Packages in this update: pgbouncer-1.24.1-2.fc40 Update description: Update to 1.24.1, fixes CVE-2025-2291. Read More
pgbouncer-1.24.1-2.fc42
FEDORA-2025-25e04398c7 Packages in this update: pgbouncer-1.24.1-2.fc42 Update description: Update to 1.24.1, fixes CVE-2025-2291. Read More
pgbouncer-1.24.1-2.el10_1
FEDORA-EPEL-2025-c1249be8e7 Packages in this update: pgbouncer-1.24.1-2.el10_1 Update description: Update to 1.24.1, fixes CVE-2025-2291. Read More