Security Advisory

CVE-2025-13167

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-27 08:34:19

Last updated 2026-05-27 13:43:43

Assigner synology

CVSS score 5.4

State PUBLISHED

Description

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors.

← Browse all CVEs View on cve.org ↗