Vulnerabilities in Video Station

Summary

Three vulnerabilities have been reported to affect Video Station:

• CVE-2023-34975 and CVE-2023-34976: SQL injection vulnerabilities
• CVE-2023-34977: Cross-site scripting (XSS) vulnerability

If exploited, these vulnerabilities could allow authenticated users to inject malicious code via a network.

We have already fixed the vulnerability in the following version:

Recommendation

To fix the vulnerability, we recommend updating Video Station to the latest version.

Updating Video Station

1. Log on to QTS or QuTS hero as administrator.
2. Open the App Center and then click .
   A search box appears.
3. Type "Video Station" and then press ENTER.
   Video Station appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your Video Station is already up to date.
5. Click OK.
   The application is updated.