{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"Web Center","platforms":["Linux","x86","64 bit","ARM"],"product":"ADM","vendor":"ASUSTOR","versions":[{"lessThanOrEqual":"4.0.6.REG2","status":"affected","version":"4.0","versionType":"custom"},{"lessThanOrEqual":"4.1.0.RLQ1","status":"affected","version":"4.1","versionType":"custom"},{"lessThanOrEqual":"4.2.1.RGE2","status":"affected","version":"4.2","versionType":"custom"}]},{"defaultStatus":"unaffected","platforms":["Linux","x86","ARM","64 bit"],"product":"LooksGood","vendor":"ASUSTOR","versions":[{"lessThanOrEqual":"2.0.0.R129","status":"affected","version":"2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","platforms":["Linux","x86","ARM","64 bit"],"product":"SoundsGood","vendor":"ASUSTOR","versions":[{"lessThanOrEqual":"2.3.0.r1027","status":"affected","version":"2.3","versionType":"custom"}]}],"source":"security@asustor.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:asustor:adm:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E263E01C-BF3F-4107-989E-8EE195511DF7","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:adm:4.0.6:reg2:*:*:*:*:*:*","matchCriteriaId":"CD67EA77-03E9-435C-B1AF-C6EEEB69E55F","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:adm:4.1.0:-:*:*:*:*:*:*","matchCriteriaId":"0284FF36-321E-471E-A1E9-58A36E7A8039","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:adm:4.1.0:rlq1:*:*:*:*:*:*","matchCriteriaId":"C6FBB975-F3A3-41C6-822A-AF32997422F6","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:adm:4.2.1:-:*:*:*:*:*:*","matchCriteriaId":"4E95A07A-CA6B-4E79-BF1A-F1A3A97D1C9F","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:adm:4.2.1:rge2:*:*:*:*:*:*","matchCriteriaId":"62B4CDB5-AF06-40D1-A243-7577BAF3D001","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:looksgood:2.0.0:-:*:*:*:*:*:*","matchCriteriaId":"B03279A2-073F-463B-86FA-2BC862F94227","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:looksgood:2.0.0:r129:*:*:*:*:*:*","matchCriteriaId":"D64E2127-EB5B-450A-A4A0-0967CAC153C9","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:soundsgood:2.3.0:-:*:*:*:*:*:*","matchCriteriaId":"6311BD0B-3160-4C44-A837-414885F6EABF","vulnerable":true},{"criteria":"cpe:2.3:a:asustor:soundsgood:2.3.0:r1027:*:*:*:*:*:*","matchCriteriaId":"B0CE69E6-949C-4A8D-B54C-03398447D012","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below."}],"id":"CVE-2023-2509","lastModified":"2026-06-17T05:52:45.007","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":5.5,"source":"security@asustor.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2509","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-01-22T16:51:21.778917Z","version":"2.0.3"}}]},"published":"2023-05-17T07:15:08.567","references":[{"source":"security@asustor.com","tags":["Vendor Advisory"],"url":"https://www.asustor.com/security/security_advisory_detail?id=22"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.asustor.com/security/security_advisory_detail?id=22"}],"sourceIdentifier":"security@asustor.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@asustor.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}