Skip to content
OpenAdvisories
Unscored CVE-2017-15892 EUVD-2017-7311GHSA-f262-299x-rch2

Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated …

Published Dec 28, 2017 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Chat

Description

Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter.

Affected products

VendorProductAffectedFixed
Synology Chat before 2.0.0-1124 —

References