medium6.5
CVE-2017-16766
An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users t…
Impact
An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Diskstation Manager | from 6.0.0 before 6.0.3-8754-6 from 6.1.0 before 6.1.4-15217 |