Unscored CVE-2017-11148 EUVD-2017-2783GHSA-j3h5-6g74-vcfx

Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to ac…

Published Aug 11, 2017 · Updated Sep 17, 2024 · Assigned by synology

Description

Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Chat	before 1.1.0-0806	—

References

100310 vdb-entry
https://www.synology.com/en-global/support/security/Synology_SA_17_38_Chat