VulnerabilityModified

CVE-2023-2509

A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps.

MEDIUM 6.1EPSS 0.34%

Does this matter?

Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.

Description

A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.34% probability · 27th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: asustor/adm · asustor/looksgood · asustor/soundsgood
Source: security@asustor.com

References

https://www.asustor.com/security/security_advisory_detail?id=22Vendor Advisory
https://www.asustor.com/security/security_advisory_detail?id=22Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.