CVE-2023-23354

🗓️ 19 Dec 2024 01:39:27Reported by qnapType

Cross-site scripting vulnerability affects QNAP OS, allowing remote access for data theft.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the QuLog Center software platform for managing QNAP NAS devices lies in the lack of security measures to protect the website structure. This allows attackers to carry out XSS attacks.	23 Dec 202400:00	–	bdu_fstec
Circl	CVE-2023-23354	19 Dec 202402:13	–	circl
CNNVD	QNAP Systems QuLog Center 跨站脚本漏洞	19 Dec 202400:00	–	cnnvd
Cvelist	CVE-2023-23354 QuLog Center	19 Dec 202401:39	–	cvelist
EUVD	EUVD-2023-27454	3 Oct 202520:07	–	euvd
NVD	CVE-2023-23354	19 Dec 202402:15	–	nvd
OSV	CVE-2023-23354	19 Dec 202402:15	–	osv
Positive Technologies	PT-2023-9810	8 Sep 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-23354	23 May 202502:36	–	redhatcve
Vulnrichment	CVE-2023-23354 QuLog Center	19 Dec 202401:39	–	vulnrichment

NVD

Node

qnap qulog_centerRange<1.5.0.738

AND

qnap qtsMatch5.0.1

qnap quts_heroMatchh5.0.1

Node

qnap qulog_centerRange<1.3.1.645

AND

qnap qtsMatch4.5.4

qnap quts_heroMatchh4.5.4

Node

qnap qulog_centerRange<1.4.1.691

AND

qnap qutscloudMatchc5.0.1

[
  {
    "defaultStatus": "unaffected",
    "product": "QuLog Center",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.5.0.738 ( 2023/03/06 )",
        "status": "affected",
        "version": "1.5.x.x",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4.1.691 ( 2023/03/01 )",
        "status": "affected",
        "version": "1.4.x.x",
        "versionType": "custom"
      },
      {
        "lessThan": "1.3.1.645 ( 2023/02/22 )",
        "status": "affected",
        "version": "1.3.x.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
qnap	www.qnap.com/en/security-advisory/qsa-23-13

17 Jun 2026 05:36Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.3 - 8.7

EPSS0.00407

SSVC

CWE-79