A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QTS 4.5.4.2467 build 20230718 and later QuTS hero h5.1.0.2424 build 20230609 and later QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h4.5.4.2476 build 20230728 and later
Published 2023-12-08 16:15:16
Updated 2023-12-12 19:50:04
View at NVD,   CVE.org
Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2023-23372

  • Qnap » QTS » Version: 5.0.1.2034 Update Build 20220515
    cpe:2.3:o:qnap:qts:5.0.1.2034:build_20220515:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2079 Update Build 20220629
    cpe:2.3:o:qnap:qts:5.0.1.2079:build_20220629:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2131 Update Build 20220820
    cpe:2.3:o:qnap:qts:5.0.1.2131:build_20220820:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2137 Update Build 20220826
    cpe:2.3:o:qnap:qts:5.0.1.2137:build_20220826:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2145 Update Build 20220903
    cpe:2.3:o:qnap:qts:5.0.1.2145:build_20220903:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2173 Update Build 20221001
    cpe:2.3:o:qnap:qts:5.0.1.2173:build_20221001:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2194 Update Build 20221022
    cpe:2.3:o:qnap:qts:5.0.1.2194:build_20221022:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2234 Update Build 20221201
    cpe:2.3:o:qnap:qts:5.0.1.2234:build_20221201:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2248 Update Build 20221215
    cpe:2.3:o:qnap:qts:5.0.1.2248:build_20221215:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2277 Update Build 20230112
    cpe:2.3:o:qnap:qts:5.0.1.2277:build_20230112:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2346 Update Build 20230322
    cpe:2.3:o:qnap:qts:5.0.1.2346:build_20230322:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.1715 Update Build 20210630
    cpe:2.3:o:qnap:qts:4.5.4.1715:build_20210630:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.1723 Update Build 20210708
    cpe:2.3:o:qnap:qts:4.5.4.1723:build_20210708:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.1741 Update Build 20210726
    cpe:2.3:o:qnap:qts:4.5.4.1741:build_20210726:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.1787 Update Build 20210910
    cpe:2.3:o:qnap:qts:4.5.4.1787:build_20210910:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.1800 Update Build 20210923
    cpe:2.3:o:qnap:qts:4.5.4.1800:build_20210923:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.1892 Update Build 20211223
    cpe:2.3:o:qnap:qts:4.5.4.1892:build_20211223:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.1931 Update Build 20220128
    cpe:2.3:o:qnap:qts:4.5.4.1931:build_20220128:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.2012 Update Build 20220419
    cpe:2.3:o:qnap:qts:4.5.4.2012:build_20220419:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.2117 Update Build 20220802
    cpe:2.3:o:qnap:qts:4.5.4.2117:build_20220802:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.2280 Update Build 20230112
    cpe:2.3:o:qnap:qts:4.5.4.2280:build_20230112:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.1.0.2348 Update Build 20230325
    cpe:2.3:o:qnap:qts:5.1.0.2348:build_20230325:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.1.0.2399 Update Build 20230515
    cpe:2.3:o:qnap:qts:5.1.0.2399:build_20230515:*:*:*:*:*:*
  • Qnap » QTS » Version: 4.5.4.2374 Update Build 20230416
    cpe:2.3:o:qnap:qts:4.5.4.2374:build_20230416:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.0.1.2376 Update Build 20230421
    cpe:2.3:o:qnap:qts:5.0.1.2376:build_20230421:*:*:*:*:*:*
  • Qnap » QTS » Version: 5.1.0.2418 Update Build 20230603
    cpe:2.3:o:qnap:qts:5.1.0.2418:build_20230603:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H5.0.1.2045 Update Build 20220526
    cpe:2.3:o:qnap:quts_hero:h5.0.1.2045:build_20220526:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H5.0.1.2192 Update Build 20221020
    cpe:2.3:o:qnap:quts_hero:h5.0.1.2192:build_20221020:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H5.0.1.2248 Update Build 20221215
    cpe:2.3:o:qnap:quts_hero:h5.0.1.2248:build_20221215:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H5.0.1.2269 Update Build 20230104
    cpe:2.3:o:qnap:quts_hero:h5.0.1.2269:build_20230104:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H5.0.1.2277 Update Build 20230112
    cpe:2.3:o:qnap:quts_hero:h5.0.1.2277:build_20230112:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H5.0.1.2348 Update Build 20230324
    cpe:2.3:o:qnap:quts_hero:h5.0.1.2348:build_20230324:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.1771 Update Build 20210825
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1771:build_20210825:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.1800 Update Build 20210923
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1800:build_20210923:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.1813 Update Build 20211006
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1813:build_20211006:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.1848 Update Build 20211109
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1848:build_20211109:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.1892 Update Build 20211223
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1892:build_20211223:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.1951 Update Build 20220218
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1951:build_20220218:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.1971 Update Build 20220310
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1971:build_20220310:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.1991 Update Build 20220330
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1991:build_20220330:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.2052 Update Build 20220530
    cpe:2.3:o:qnap:quts_hero:h4.5.4.2052:build_20220530:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.2138 Update Build 20220824
    cpe:2.3:o:qnap:quts_hero:h4.5.4.2138:build_20220824:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.2217 Update Build 20221111
    cpe:2.3:o:qnap:quts_hero:h4.5.4.2217:build_20221111:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.2272 Update Build 20230105
    cpe:2.3:o:qnap:quts_hero:h4.5.4.2272:build_20230105:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H4.5.4.2374 Update Build 20230417
    cpe:2.3:o:qnap:quts_hero:h4.5.4.2374:build_20230417:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H5.0.1.2376 Update Build 20230421
    cpe:2.3:o:qnap:quts_hero:h5.0.1.2376:build_20230421:*:*:*:*:*:*
  • Qnap » Quts Hero » Version: H5.1.0.2409 Update Build 20230525
    cpe:2.3:o:qnap:quts_hero:h5.1.0.2409:build_20230525:*:*:*:*:*:*

Exploit prediction scoring system (EPSS) score for CVE-2023-23372

0.06%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 29 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-23372

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
6.1
MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2.8
2.7
NIST
6.5
MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
2.8
3.6
QNAP Systems, Inc.

CWE ids for CVE-2023-23372

References for CVE-2023-23372

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!