Security Advisory

CVE-2020-28187

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-12-24 14:31:58

Last updated 2024-08-04 16:33:58

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple directory traversal vulnerabilities in TerraMaster TOS <= 4.2.06 allow remote authenticated attackers to read, edit or delete any file within the filesystem via the (1) filename parameter to /tos/index.php?editor/fileGet, Event parameter to /include/ajax/logtable.php, or opt parameter to /include/core/index.php.

← Browse all CVEs View on cve.org ↗