Video Station SQL Injection Vulnerability

CVE-2023-50360

What is CVE-2023-50360?

A SQL injection vulnerability has been identified in QNAP's Video Station, allowing authenticated users to execute malicious code through network interactions. This vulnerability has implications for the security of the application by potentially exposing sensitive user data and system integrity. Users are encouraged to update to Video Station version 5.8.1 or later, released on February 26, 2024, to mitigate the risk associated with this vulnerability and bolster their security posture.

References