CVE-2018-13337

5.4 mediumEPSS 1.2%

Medium (5.4) in terra-master terramaster operating system. EPSS 1.2% chance of exploitation in the next 30 days.

Session Fixation in the web application for TerraMaster TOS version 3.1.03 allows attackers to control users' session cookies via JavaScript.

Severity

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-384
Published: 2018-11-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19