Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-11827 EUVD-2019-3493GHSA-mc67-4f82-v68g

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows remote attackers to in…

Published Jun 30, 2019 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Note Station

Description

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows remote attackers to inject arbitrary web script or HTML via the object_id parameter.

Affected products

VendorProductAffectedFixed
Synology Note Station unspecified – < 2.5.3-0863 2.5.3-0863

References