← CVE Intelligence

CVE-2017-16766

Synology / DiskStation Manager (DSM) PUBLISHED

Description (CNA)

An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option.

Affected (CNA)

Vendor / productVersions
Synology / DiskStation Manager (DSM)affected before 6.1.4-15217; affected before 6.0.3-8754-6

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.