CVE-2018-12300

Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header…

mitre·CWE-601·Published 2019-05-13

CVSS

—

EPSS

0.03

KEV

Exploits

cve.orgen

167 chars

Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter.

NVDen

167 chars

Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter.

NVDes

192 chars

El redireccionamiento arbitrario en echo-server.html en Seagate NAS OS versión 4.3.15.1, permite a atacantes revelar información en el encabezado Referer mediante el parámetro de URL "state".

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N
3.0	Primary	NVD	6.1	2.8	2.7	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N