CVE-2018-12301 (nas_os)

Unvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access the loopback interface via a Download URL of 127.0.0.1 or localhost.
Source: NIST
CVE-2018-12301 (nas_os)