PT-2019-8891
CVE-2018-12304
·
تاريخ النشر
2019-05-13
·
تاريخ التحديث
2019-05-13
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Seagate NAS OS version 4.3.15.1
Description
The issue concerns cross-site scripting in the Application Manager. Attackers can execute JavaScript via multiple application metadata fields, including
Short Description, Publisher Name, Publisher Contact, or Website URL.Recommendations
For Seagate NAS OS version 4.3.15.1, avoid using the vulnerable metadata fields until a patch is available. As a temporary workaround, consider restricting access to the Application Manager to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾