CVE-2018-12299

Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via uploaded file names.
Configurations

Configuration 1 (hide)

cpe:2.3:o:seagate:nas_os:4.3.15.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-05-13 13:29

Updated : 2023-12-10 12:59


NVD link : CVE-2018-12299

Mitre link : CVE-2018-12299

CVE.ORG link : CVE-2018-12299


JSON object : View

Products Affected

seagate

  • nas_os
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')