CVE-2023-47559: QuMagie

Published Jan 5, 2024

Updated

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.

We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later

Affected Software

1 affected component

QNAP Qumagie=2.2.0

Remediation

Information

We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later

Event History

Jan 5, 2024

CVE Published

via MITRE·04:18 PM

Data Sourced

via MITRE·04:18 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-47559?

CVE-2023-47559 is classified as a cross-site scripting (XSS) vulnerability, which can be exploited by authenticated users to inject malicious code.

How do I fix CVE-2023-47559?

To fix CVE-2023-47559, upgrade to QuMagie version 2.2.1 or later.

Who is affected by CVE-2023-47559?

CVE-2023-47559 affects users of QuMagie version 2.2.0.

What could happen if CVE-2023-47559 is exploited?

If exploited, CVE-2023-47559 could allow authenticated users to execute malicious scripts within the application.

Is there a workaround for CVE-2023-47559?

There are no specific workarounds for CVE-2023-47559; the only solution is to upgrade to the latest version.