QwikSec

Security Database

CVE

CWE

Training

CVE-2017-15892

Published: Dec 28, 2017

Modified: Sep 16, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter.

Vendor	Product	Versions
Synology	Chat	affected `before 2.0.0-1124`

Weaknesses (CWE)

References

https://www.synology.com/en-global/support/security/Synology_SA_17_78

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.