Medium · 6.5 CVE-2018-8921 EUVD-2018-20529GHSA-56rc-gpxm-rv3v

Cross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remote authenticated user…

Published Jun 1, 2018 · Updated Sep 16, 2024 · Assigned by synology

Description

Cross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name.

Affected products

Vendor	Product	Affected	Fixed
Synology	Drive	unspecified – < 1.0.2-10275	1.0.2-10275

References

https://www.synology.com/en-global/support/security/Synology_SA_18_11