CVE-2017-15891

Synology Calendar (before 2.0.1-0242) is affected by an improper access control vulnerability in SYNO.Cal.EventBase. Remote authenticated users can modify calendar events via unspecified vectors. Root cause: access control flaw in EventBase handling. Impact: ability to alter events without proper...