Description
A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.927 ( 2025/09/17 ) and later
Problem types
Product status
1.8.x.x (custom) before 1.8.2.927 ( 2025/09/17 )
Credits
Tim Coen
References
www.qnap.com/en/security-advisory/qsa-25-42
