Skip to content
OpenAdvisories
High · 7.1 CVE-2017-16775 EUVD-2017-7954GHSA-q54f-p9w8-3gc2

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote a…

Published Apr 1, 2019 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: SSO Server

Description

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology SSO Server unspecified – < 2.1.3-0129 2.1.3-0129

References