Video Station
CVE-2023-34977

4.6MEDIUM

Key Information:

Vendor: QNAP
Status: Video Station
Vendor: CVE Published:; 13 October 2023

What is CVE-2023-34977?

A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.

We have already fixed the vulnerability in the following version: Video Station 5.7.0 ( 2023/07/27 ) and later

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Video Station 5.7.x < 5.7.0 ( 2023/07/27 )

References

https://www.qnap.com/en/security-advisory/qsa-23-52

CVSS V3.1

Score:

4.6

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Oct 13, 2023
Vulnerability Reserved
Jun 8, 2023

Credit

Kaibro

JSON

QNAP