Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-8923 EUVD-2018-20531GHSA-gv6f-6f67-8vrw

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users…

Published Jun 5, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: File Station

Description

Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments.

Affected products

VendorProductAffectedFixed
Synology File Station unspecified – < 1.1.4-0122 1.1.4-0122

References