CVE-2023-32974

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions:...

QNAP QTS / QuTS hero Path Traversal (QSA-23-42)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-23-42 advisory. A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the...

QNAP QuTScloud Multiple Vulnerabilities (QSA-23-41, QSA-23-42)

QNAP QuTScloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutscloud"; ifdescripti...

CVE-2023-32974

CVE-2023-32974 is a path traversal vulnerability affecting QNAP QTS, QuTS hero, and QuTScloud. The issue could allow reading content from unexpected files and exposing sensitive data over the network. Affected versions have been fixed in QTS 5.1.0.2444+ (build 20230629+), QuTS hero h5.1.0.2424+ (...