ASUSTOR DataSync Center Security Bypass Vulnerability Allowing Reverse Tabnabbing

A security bypass vulnerability in ASUSTOR DataSync Center versions 1.1.0 prior to 1.1.0.r207 and 1.2.0 prior to 1.2.0.r206 allows exploitation through Reverse Tabnabbing. This type of phishing attack enables attackers to manipulate the content of the original tab, potentially leading to credential theft and other security risks.

Impact

Exploitation of this vulnerability could result in a security bypass, allowing for Reverse Tabnabbing attacks that manipulate the content of the user's original tab, with the potential for credential theft and other security risks.

Remediation

Users can upgrade to DataSync Center 1.1.0.r208 or above for ADM 4.x, or to version 1.2.0.r207 or above for ADM 5.0 and above.