CVE-2018-13355

6.5 mediumEPSS 1.1%

Medium (6.5) in terra-master terramaster operating system. EPSS 1.1% chance of exploitation in the next 30 days.

Incorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow attackers to create user groups without proper authorization.

Severity

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2018-11-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19