Description (CNA)
Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / Synology Chat | affected before 1.1.0-0806 |
CWE
CWE-918
References
- http://www.securityfocus.com/bid/100310
- https://www.synology.com/en-global/support/security/Synology_SA_17_38_Chat
ADP enrichment
No English description supplied.