← All advisories

Medium severity5.4NVD Advisory· Published Dec 4, 2018· Updated Jun 17, 2026

CVE-2018-12310

CVE-2018-12310

Description

Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature.

Affected products

2

Asustor/Adminferred2 versions
= 3.1.1+ 1 more
- (no CPE)range: = 3.1.1
- (no CPE)range: 3.1.1

Patches

Vulnerability mechanics

References

1

blog.securityevaluators.com/over-a-dozen-vulnerabilities-discovered-in-asustor-as-602t-8dd5832a82ccnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.