Skip to content
OpenAdvisories
Medium · 5.9 CVE-2018-13293 EUVD-2018-5241GHSA-3rqm-h72f-c2xq

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remo…

Published Apr 1, 2019 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: DiskStation Manager (DSM)

Description

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) unspecified – < 6.2.1-23824 6.2.1-23824

References