CVE-2018-12302

Missing HTTPOnly flag on session cookies in the Seagate NAS OS version 4.3.15.1 web application allows attackers to steal session tokens via cross-site scripting.
Configurations

Configuration 1 (hide)

cpe:2.3:o:seagate:nas_os:4.3.15.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-05-13 13:29

Updated : 2023-12-10 12:59


NVD link : CVE-2018-12302

Mitre link : CVE-2018-12302

CVE.ORG link : CVE-2018-12302


JSON object : View

Products Affected

seagate

  • nas_os
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')