PT-2017-7552
CVE-2015-9105
·
تاريخ النشر
2017-06-30
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Synology Video Station versions 1.2 before 1.2-0455
Synology Video Station versions 1.5 before 1.5-0772
Synology Video Station versions 1.6 before 1.6-0847
Description
The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the
file name or collection name of videos.Recommendations
For Synology Video Station versions 1.2 before 1.2-0455, update to version 1.2-0455 or later.
For Synology Video Station versions 1.5 before 1.5-0772, update to version 1.5-0772 or later.
For Synology Video Station versions 1.6 before 1.6-0847, update to version 1.6-0847 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾