PT-2018-11755
CVE-2018-13331
·
تاريخ النشر
2018-11-27
·
تاريخ التحديث
2018-12-20
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
TerraMaster TOS version 3.1.03
Description
The issue allows attackers to execute JavaScript when viewing users by placing JavaScript in their usernames, due to cross-site scripting in the Control Panel.
Recommendations
For TerraMaster TOS version 3.1.03, update to a version that fixes this issue, or as a temporary workaround, consider validating and sanitizing usernames to prevent the execution of JavaScript code.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾