Skip to content
OpenAdvisories
Medium · 5.4 CVE-2018-8927 EUVD-2018-20535GHSA-pc82-888m-pq3g

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary …

Published Jun 14, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Calendar

Description

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter.

Affected products

VendorProductAffectedFixed
Synology Calendar unspecified – < 2.1.2-0511 2.1.2-0511

References