PT-2018-10627

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.0.RFQ3 Description The issue is related to an unauthenticated remote code execution in the "portal/apis/aggrecate js.cgi" API endpoint. This is achieved by embedding OS commands in the script parameter. Recommendations...