PT-2018-18718 · Synology · Synology Diskstation Manager
CVE-2018-8920
·
Published
2018-12-24
·
Updated
2025-01-14
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Synology DiskStation Manager (DSM) versions prior to 6.1.6-15266
Description
The issue is related to improper neutralization of escape in the Log Exporter component, allowing remote attackers to inject arbitrary content when exporting an archive in CSV format. This could potentially have an unspecified impact.
Recommendations
For versions prior to 6.1.6-15266, update to version 6.1.6-15266 or later to resolve the issue.
Fix
Improper Encoding or Escaping of Output
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Synology Diskstation Manager