Cross-Site Scripting Vulnerability in Seagate NAS OS
CVE-2018-12303

5.4MEDIUM

Key Information:

Vendor

Seagate

Status
Nas Os
Vendor
CVE Published:
13 May 2019

What is CVE-2018-12303?

The vulnerability allows attackers to exploit cross-site scripting in the Seagate NAS OS by injecting JavaScript code through specially crafted directory names. When a user accesses a compromised directory, the malicious JavaScript can execute, potentially compromising user data and enabling further attacks.

References

https://blog.securityevaluators.com/invading-your-persona...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.