high7.3
CVE-2020-28186
Email Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the forget password functionality and achieve account takeover.
Impact
Email Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the forget password functionality and achieve account takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Terra-Master | Tos | through 4.2.06 |