CVE-2019-11829

OS command injection vulnerability in driverssynoimportuser.php in Synology Calendar before 2.3.1-0617 allows remote attackers to execute arbitrary commands via the crafted 'X-Real-IP' header...

CVE-2019-11829

An OS command injection vulnerability exists in Synology Calendar (versions prior to 2.3.1-0617 ) within the drivers_syno_import_user.php file. The root cause is the improper filtering of special characters and commands from external input data during the construction of operating system executab...