Vulnerabilities > Asustor > As602T > Low

DATE CVE VULNERABILITY TITLE RISK
2018-12-04 CVE-2018-12310 Cross-site Scripting vulnerability in Asustor Data Master 3.1.1
Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature.
network
asustor CWE-79
3.5
2018-12-04 CVE-2018-12311 Cross-site Scripting vulnerability in Asustor Data Master 3.1.1
Cross-site scripting vulnerability in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute arbitrary JavaScript when a file is moved via a malicious filename.
network
asustor CWE-79
3.5