Total vulnerabilities in the database
A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network.
We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build 20230906 and later QTS 5.1.1.2491 build 20230815 and later QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.1.2488 build 20230812 and later QuTScloud c5.1.0.2498 and later
| Software | From | Fixed in |
|---|---|---|
| qnap / qts | - | 5.1.1.2491 |
| qnap / qts | - | 5.0.1.2514 |
| qnap / quts_hero | - | h5.1.1.2488 |
| qnap / quts_hero | - | h5.0.1.2515 |
| qnap / qutscloud | - | c5.1.0.2498 |