CVE-2018-15699: XSS
Published Aug 27, 2018
·Updated
ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS. A man in the middle can take advantage of this by inserting Javascript into the configuration files Version field.
Affected Software
1 affected component
ASUSTOR Data Master<=3.1.5
Event History
Aug 27, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of ASUSTOR Data Master?
The vulnerability ID of ASUSTOR Data Master is CVE-2018-15699.
2
What is the severity level of CVE-2018-15699?
The severity level of CVE-2018-15699 is medium.
3
What is the affected software version of CVE-2018-15699?
The affected software version of CVE-2018-15699 is ASUSTOR Data Master 3.1.5 and below.
4
What is the CWE category of CVE-2018-15699?
The CWE category of CVE-2018-15699 is CWE-79 (Cross-Site Scripting).
5
Where can I find more information about CVE-2018-15699?
You can find more information about CVE-2018-15699 at the following reference link: [https://www.tenable.com/security/research/tra-2018-22](https://www.tenable.com/security/research/tra-2018-22).