Description
Email Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the forget password functionality and achieve account takeover.
Scores
CVSS v3
7.3
EPSS
0.3002
EPSS Percentile
96.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-640
Status
published
Products (1)
terra-master/tos
< 4.2.06
Published
Dec 24, 2020
Tracked Since
Feb 18, 2026