EUVD-2018-20535

Malware in sbrugna...

Authorization

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the 1 calid or 2 originalcalid parameter...

CVE-2018-8927

The CVE-2018-8927 entry concerns Synology Calendar (SYNO.Cal.Event). The vulnerability is an improper authorization issue in Calendar before version 2.1.2-0511, enabling remote authenticated users to create arbitrary events through the cal_id or original_cal_id parameters. The provided documents ...

CVE-2018-8927

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the 1 calid or 2 originalcalid parameter...