Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-15699
HistoryAug 27, 2018 - 2:29 p.m.

Design/Logic Flaw

2018-08-2714:29:00
PRIOn knowledge base
www.prio-n.com
2

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.2%

ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS. A man in the middle can take advantage of this by inserting Javascript into the configuration files Version field.

CPENameOperatorVersion
data_masterle3.1.5

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.2%

Related for PRION:CVE-2018-15699