Medium · 6.5 CVE-2018-8918 EUVD-2018-20526GHSA-wc3h-m5p7-867x

Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1.7-6941 allows remote attackers to inject a…

Published Dec 24, 2018 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology Router Manager (SRM)

Description

Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Router Manager (SRM)	unspecified – < 1.1.7-6941	1.1.7-6941

References

https://www.synology.com/security/advisory/Synology_SA_18_25