| |
Vulnerability CVE-2023-39301
Published: 2023-11-03
| Description: |
A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2514 build 20230906 and later
QTS 5.1.1.2491 build 20230815 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h5.1.1.2488 build 20230812 and later
QuTScloud c5.1.0.2498 and later
|
Type:
CWE-918
References: |
https://www.qnap.com/en/security-advisory/qsa-23-51
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
