CVE-2018-13361 - User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter

MEDIUM

User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter

Published Nov 27, 2018

5.3

MEDIUM

CVSS 3.0

EPSS 16.93%

User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 27, 2018

Updated Aug 5, 2024

Reserved Jul 5, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a