Medium severity4.7NVD Advisory· Published Mar 8, 2024· Updated Jun 17, 2026

CVE-2024-21901

Description

A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network.

We have already fixed the vulnerability in the following versions: myQNAPcloud 1.0.52 ( 2023/11/24 ) and later QTS 4.5.4.2627 build 20231225 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qnap/Myqnapcloud
cpe:2.3:a:qnap:myqnapcloud:*:*:*:*:*:*:*:*
Range: <1.0.52
Qnap/Qts3 versions
cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*range: <4.5.4.2627
- cpe:2.3:o:qnap:qts:4.5.4.2627:-:*:*:*:*:*:*
- (no CPE)range: >=4.5.4.2627 build 20231225
Qnap/Myqnapcloud Linkllm-fuzzy
Range: >=1.0.52
QNAP Systems Inc./myQNAPcloud Linkcpe-rescue
Range: 1.0.x
QNAP Systems Inc./QTScpe-rescue
Range: 4.5.x

cvss	0.306
epss	0.015
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2024-21901

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions