{ "schema_version": "1.4.0", "id": "GHSA-jrp8-hw9c-v2hg", "modified": "2022-05-24T21:59:48Z", "published": "2022-05-24T21:59:48Z", "aliases": [ "CVE-2018-12300" ], "details": "Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12300" }, { "type": "WEB", "url": "https://blog.securityevaluators.com/invading-your-personal-cloud-ise-labs-exploits-the-seagate-stcr3000101-ecf89de2170" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-05-13T13:29:00Z" } }