CVE-2023-41289

Publication date

2024-01-05 16:19:05

Family

qnap

State

PUBLISHED

Description

An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QcalAgent 1.1.8 and later