Security Advisory

CVE-2017-15892

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-12-28 15:00:00

Last updated 2024-09-16 16:42:31

Assigner synology

CVSS score not scored

State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter.

← Browse all CVEs View on cve.org ↗