Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-8911 EUVD-2018-20519GHSA-vcgc-8gfq-c8g9

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users…

Published May 9, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Note Station

Description

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments.

Affected products

VendorProductAffectedFixed
Synology Note Station unspecified – < 2.5.1-0844 2.5.1-0844

References