CVE-2024-32762

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuLog Center 1.8.0.872 ( 2024/06/17 ) and later QuLog Center 1.7.0.827 ( 2024/06/17 ) and later

Score

CVSS 3.1 8.2 High

Status

Analyzed - security@qnapsecurity.com.tw

Published

2024-09-06

Last modified

2024-09-06

Weaknesses

CWE-79

Affected products

• Qulog Center (Qnap)
• Qulog Center (Qnap Systems Inc.)

References

• https://www.qnap.com/en/security-advisory/qsa-24-30