Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-23354

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.5.0.738 ( 2023/03/06 ) and later QuLog Center 1.4.1.691 ( 2023/03/01 ) and later QuLog Center 1.3.1.645 ( 2023/02/22 ) and later

Published

2024-12-19T02:15:21.687

Last Modified

2026-01-20T21:59:51.400

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.3 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application qnap qulog_center < 1.5.0.738 Yes
Operating System qnap qts 5.0.1 No
Operating System qnap quts_hero h5.0.1 No
Application qnap qulog_center < 1.3.1.645 Yes
Operating System qnap qts 4.5.4 No
Operating System qnap quts_hero h4.5.4 No
Application qnap qulog_center < 1.4.1.691 Yes
Operating System qnap qutscloud c5.0.1 No
References