Security Advisory

CVE-2017-16774

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-04-01 14:24:13

Last updated 2024-09-16 18:18:02

Assigner synology

CVSS score 6.5

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter.

← Browse all CVEs View on cve.org ↗