CVE-2019-11829 — Synology / Calendar

CVE-2019-11829

Synology / Calendar PUBLISHED

Description (CNA)

OS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote attackers to execute arbitrary commands via the crafted 'X-Real-IP' header.

Affected (CNA)

Vendor / product	Versions
Synology / Calendar	affected unspecified before 2.3.1-0617

CWE

CWE-78

References

https://www.synology.com/security/advisory/Synology_SA_19_12

ADP enrichment

CVE

No English description supplied.

https://www.synology.com/security/advisory/Synology_SA_19_12