PT-2018-18718 · Synology · Synology Diskstation Manager
CVE-2018-8920
·
Publicado
2018-12-24
·
Atualizado
2025-01-14
CVSS v3.1
7.2
Alta
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Synology DiskStation Manager (DSM) versions prior to 6.1.6-15266
Description
The issue is related to improper neutralization of escape in the Log Exporter component, allowing remote attackers to inject arbitrary content when exporting an archive in CSV format. This could potentially have an unspecified impact.
Recommendations
For versions prior to 6.1.6-15266, update to version 6.1.6-15266 or later to resolve the issue.
Correção
Improper Encoding or Escaping of Output
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Synology Diskstation Manager