Server side request forgery (ssrf)

2017-08-1119:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.5%

JSON

Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.

CPENameOperatorVersion
chateq<= 1.0.2-159

CPE	Name	Operator	Version
	chat	eq	<= 1.0.2-159

References

www.securityfocus.com/bid/100310

www.synology.com/en-global/support/security/Synology_SA_17_38_Chat