Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-8917 EUVD-2018-20525GHSA-xqh5-26xp-246w

Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to in…

Published Dec 24, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: DiskStation Manager (DSM)

Description

Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) unspecified – < 6.1.6-15266 6.1.6-15266

References