Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-39301

A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build 20230906 and later QTS 5.1.1.2491 build 20230815 and later QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.1.2488 build 20230812 and later QuTScloud c5.1.0.2498 and later

Published

2023-11-03T17:15:08.987

Last Modified

2024-11-21T08:15:06.693

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-918
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qnap qts < 5.1.1.2491 Yes
Operating System qnap qts < 5.0.1.2514 Yes
Operating System qnap quts_hero < h5.1.1.2488 Yes
Operating System qnap quts_hero < h5.0.1.2515 Yes
Operating System qnap qutscloud < c5.1.0.2498 Yes
References