CVE-2023-50360: Video Station
A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
We have already fixed the vulnerability in the following version: Video Station 5.8.1 ( 2024/02/26 ) and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50360?
CVE-2023-50360 is a critical SQL injection vulnerability that could allow authenticated users to execute malicious code.
How do I fix CVE-2023-50360?
The vulnerability can be fixed by upgrading to Video Station version 5.8.1 or later, released on February 26, 2024.
Who is affected by CVE-2023-50360?
CVE-2023-50360 affects users of QNAP Video Station versions between 5.0.0 and 5.8.2.
What types of attacks can CVE-2023-50360 enable?
Exploitation of CVE-2023-50360 can enable attackers to perform SQL injection attacks, potentially giving them unauthorized access and control.
Is authentication required to exploit CVE-2023-50360?
Yes, exploitation of CVE-2023-50360 requires authentication, meaning only authenticated users can perform the injection.