Cross site scripting

2019-04-0115:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

21.9%

JSON

Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter.

CPENameOperatorVersion
diskstation_managerge5.2
diskstation_managerlt6.1.4

CPE	Name	Operator	Version
	diskstation_manager	ge	5.2
	diskstation_manager	lt	6.1.4

References

www.synology.com/security/advisory/Synology_SA_18_26

0.001 Low

EPSS

Percentile

21.9%

JSON

Related for PRION:CVE-2017-16774