PT-2023-9810 · Qnap · Qulog Center

Kaibro · Published 2023-09-08 · Updated 2026-01-20 · CVE-2023-23354

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions QuLog Center versions prior to 1.3.1.645 QuLog Center versions prior to 1.4.1.691 QuLog Center versions prior to 1.5.0.738

Description A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data.

Recommendations For QuLog Center versions prior to 1.3.1.645, update to version 1.3.1.645 or later. For QuLog Center versions prior to 1.4.1.691, update to version 1.4.1.691 or later. For QuLog Center versions prior to 1.5.0.738, update to version 1.5.0.738 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-11469

CVE-2023-23354

Affected Products

Qulog Center

References · 14

• https://qnap.com/en/security-advisory/qsa-23-13 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23354 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23354 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11469 · Security Note
• https://twitter.com/transilienceai/status/1869612300262387902 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1869596261617144148 · Twitter Post
• https://t.me/cveNotify/149349 · Telegram Post
• https://twitter.com/CVEnew/status/1869573124326314329 · Twitter Post
• https://t.me/cvenotify/104857 · Telegram Post
• https://twitter.com/transilienceai/status/1869612283657089281 · Twitter Post
• https://twitter.com/cracbot/status/1871435692926247310 · Twitter Post
• https://twitter.com/transilienceai/status/1869612291756319074 · Twitter Post
• https://t.me/cvedetector/13305 · Telegram Post
• https://twitter.com/transilienceai/status/1869612277302763965 · Twitter Post