CVE-2025-58469

published 2025-11-07

CVE-2025-58469: A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain…

low 1.2 CVSS 4.0

AV N AC L AT N PR N UI A VC N VI L VA N SC N SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities.

We have already fixed the vulnerability in the following version:
QuLog Center 1.8.2.927 ( 2025/09/17 ) and later

Affected

2 ranges

Vendor	Product	Version range	Fixed in
qnap	qulog_center	>= 1.8.0.872 < 1.8.2.923	1.8.2.923
qnap_systems_inc	qulog_center	>= 1.8.x.x < 1.8.2.927 ( 2025/09/17 )	1.8.2.927 ( 2025/09/17 )

CWE-352