Security Advisory

CVE-2018-8927

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-14 14:00:00

Last updated 2024-09-16 17:34:04

Assigner synology

CVSS score 5.4

State PUBLISHED

Description

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter.

← Browse all CVEs View on cve.org ↗