Here's the page we think you wanted. See search results instead:

TerraMaster NAS URL Reflected XSS

Strike ID:
E20-5k5t1
CVSS:
6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
False Positive:
f
Variants:
1
Year:
2018

Description

This strike exploits a vulnerability in the TerraMaster NAS device. This device allows for the attacker to inject Javascript in the URL because it does not properly validate pages that do not exist. It is possible for an attacker to perform a Reflected XSS attack by injecting javascript in the requested URL.

CVE

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-13329

References

https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a