PT-2024-13459 · Qumagie · Qumagie

Alan Li + 1 · Published 2024-01-05 · Updated 2024-01-11 · CVE-2023-47559

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions QuMagie versions prior to 2.2.1

Description A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.

Recommendations For versions prior to 2.2.1, update to QuMagie 2.2.1 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-47559

Affected Products

Qumagie

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-47559 · Security Note
• https://qnap.com/en/security-advisory/qsa-23-23 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-47559 · Vendor Advisory
• https://t.me/true_secator/5270 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1743356151079559193 · Twitter Post
• https://t.me/cvenotify/67033 · Telegram Post