CVE-2018-8917

Cross-site scripting XSS vulnerability in info.cgi in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8917

The CVE-2018-8917 issue affects Synology DiskStation Manager (DSM) through the info.cgi component, with the host parameter allowing cross-site scripting. Affected versions are DSM before 6.1.6-15266. Root cause is input handling in info.cgi that enables arbitrary web script or HTML injection by r...

CVE-2018-8917

Cross-site scripting XSS vulnerability in info.cgi in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter...