CVE-2018-13331 in TerraMaster TOS

Riassunto

di MITRE

Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing users by placing JavaScript in their usernames.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 05/07/2018
• Divulgazione: 27/11/2018
• Moderazione: accettato
• Voce: VDB-127187
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.1 (NVD)
• EPSS: 0.01082
• KEV: no
• Attività: molto basso
• Settore: Finance, Homeoffice, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-13331
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-13331
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-13331/