Security Advisory
CVE-2017-15891
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors.