Skip to content
OpenAdvisories
Medium · 5.5 CVE-2019-11828 EUVD-2019-3494GHSA-8xfp-rc9v-3qrx

Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated users to inject arbitrar…

Published Jun 30, 2019 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Office

Description

Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Office unspecified – < 3.1.4-2771 3.1.4-2771

References