8.8
CVSSv3

CVE-2023-47568

Published: 02/02/2024 Updated: 08/02/2024
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

Vulnerability Summary

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later

Vulnerable Product Search on Vulmon Subscribe to Product

qnap qts 5.1.0.2348

qnap qts 4.5.4.2280

qnap qts 4.5.4.2117

qnap qts 4.5.4.2012

qnap qts 4.5.4.1931

qnap qts 4.5.4.1800

qnap qts 4.5.4.1787

qnap qts 4.5.4.1741

qnap qts 4.5.4.1723

qnap qts 4.5.4.1715

qnap qts 4.5.4.1892

qnap quts hero h4.5.4.2272

qnap quts hero h4.5.4.2217

qnap quts hero h4.5.4.2138

qnap quts hero h4.5.4.2052

qnap quts hero h4.5.4.1991

qnap quts hero h4.5.4.1971

qnap quts hero h4.5.4.1951

qnap quts hero h4.5.4.1892

qnap quts hero h4.5.4.1848

qnap quts hero h4.5.4.1813

qnap quts hero h4.5.4.1800

qnap quts hero h4.5.4.1771

qnap qts 5.1.0.2418

qnap qts 5.1.0.2399

qnap qts 4.5.4.2374

qnap quts hero h5.1.0.2409

qnap quts hero h4.5.4.2374

qnap qts 5.1.0.2466

qnap qts 5.1.1.2491

qnap qts 5.1.0.2444

qnap quts hero h5.1.1.2488

qnap quts hero h5.1.0.2466

qnap quts hero h5.1.0.2453

qnap quts hero h5.1.0.2424

qnap qts 5.1.3.2578

qnap qts 5.1.2.2533

qnap quts hero h5.1.3.2578

qnap quts hero h5.1.2.2534

qnap qutscloud c5.1.0.2498

qnap quts hero h5.1.4.2596

qnap qts 5.1.5.2645

qnap qts 5.1.4.2596

qnap quts hero h5.1.5.2647

qnap qts 4.5.4.2627

qnap quts hero h4.5.4.2476

qnap quts hero h4.5.4.2626