CVE-2023-23354: QuLog Center
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following versions: QuLog Center 1.5.0.738 ( 2023/03/06 ) and later QuLog Center 1.4.1.691 ( 2023/03/01 ) and later QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-23354?
CVE-2023-23354 is classified as a cross-site scripting (XSS) vulnerability which poses a medium risk to affected users.
How do I fix CVE-2023-23354?
To fix CVE-2023-23354, ensure your QNAP software is updated to the latest version beyond 1.5.0.738.
Which QNAP operating system versions are affected by CVE-2023-23354?
CVE-2023-23354 affects several versions of the QNAP QuLog Center, specifically those prior to 1.5.0.738.
Can CVE-2023-23354 be exploited remotely?
Yes, CVE-2023-23354 can be exploited remotely by attackers who have gained user access to bypass security mechanisms.
What kind of data could be compromised by CVE-2023-23354?
If exploited, CVE-2023-23354 could allow attackers to read sensitive application data.