CVE-2017-16774

creationtimestamp| type| source ---|---|--- 2019-04-01 18:32:07+00:00| seen| https://t.me/cibsecurity/3460...

CVE-2017-16774

Synology DSM is affected by CVE-2017-16774 in the SYNO.Core.PersonalNotification.Event module. The vulnerability arises from insufficient validation of the package parameter, enabling remote authenticated users to inject arbitrary web script or HTML. Affected versions are DSM prior to 6.1.4-15217...