Vulnerabilities > Asustor > ADM > 4.0.0

DATE CVE VULNERABILITY TITLE RISK
2023-05-31 CVE-2023-2909 Path Traversal vulnerability in Asustor ADM
EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files.
network
low complexity
asustor CWE-22
critical
 10.0
10
2023-05-17 CVE-2023-2509 Cross-site Scripting vulnerability in Asustor Adm, Looksgood and Soundsgood
A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps.
network
low complexity
asustor CWE-79
6.1
6.1