CVE:CVE-2018-19943
CNNVD:CNNVD-201909-932
QNAP Systems TS-870是中国威联通（QNAP Systems）公司的一款NAS（网络附属存储）设备。
使用4.3.4.0486版本固件的QNAP Systems TS-870中存在跨站脚本漏洞。攻击者可利用该漏洞执行任意的JavaScript代码。
solution:Upgrade qnap qts to a higher version than 4.2.6,4.3.3.1252,4.3.4.1282,4.3.6.1263,4.4.1.1261,4.4.2.1270,4.2.6,4.2.6:build_20170517,4.2.6:build_20190322,4.2.6:build_20190730,4.2.6:build_20190921,4.2.6:build_20191107,4.2.6:build_20200109,4.2.6:build_20200421,4.2.6:build_20200611,4.2.6:build_20200821,and avoid the version (,4.2.6),[4.3.1.0013,4.3.3.1252),[4.3.4,4.3.4.1282),[4.3.6,4.3.6.1263),[4.4.0,4.4.1.1261),[4.4.2,4.4.2.1270),4.2.6,4.2.6:build_20170517,4.2.6:build_20190322,4.2.6:build_20190730,4.2.6:build_20190921,4.2.6:build_20191107,4.2.6:build_20200109,4.2.6:build_20200421,4.2.6:build_20200611,4.2.6:build_20200821