Cross site scripting

2019-04-0115:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

JSON

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter.

CPENameOperatorVersion
diskstation_managerge5.2
diskstation_managerlt6.2.1

CPE	Name	Operator	Version
	diskstation_manager	ge	5.2
	diskstation_manager	lt	6.2.1

References

www.synology.com/security/advisory/Synology_SA_18_51