CVE-2018-13361

MEDIUM

TerraMaster TOS 3.1.03 - User Enumeration via usertable.php modgroup Parameter

Title source: llm

User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 5.3

EPSS 0.1693

EPSS Percentile 96.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-20

Status published

Products (1)

terra-master/terramaster_operating_system 3.1.03

Published Nov 27, 2018

Tracked Since Feb 18, 2026