Description
Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents.
Unscored
CVE-2017-11150
EUVD-2017-2785GHSA-42c6-m4f9-3gr3
Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute a…
Published Aug 14, 2017 · Updated Sep 17, 2024 · Assigned by synology