CVE-2023-23366 Music Station

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Music Stati...

CVE-2023-23366

CVE-2023-23366 describes a path-traversal vulnerability in QNAP Music Station that could allow an authenticated user to read unexpected files and expose sensitive data over the network. The issue affects Music Station versions prior to 5.3.22; QNAP reports a fix in Music Station 5.3.22 and later....