medium4.9
CVE-2023-32969
A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.
Impact
A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuTScloud c5.1.5.2651 and later QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnap | Qts | from 5.1.0 before 5.1.4.2596 Version 5.1.4.2596 |
| Qnap | Quts Hero | from h5.1.0 before h5.1.4.2596 Version h5.1.4.2596 |
| Qnap | Qutscloud | from c5.0.0.1919 before c5.1.5.2651 |