Beveiligingsadvies

CVE-2025-13167

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-27 08:34:19

Laatst bijgewerkt 2026-05-27 13:43:43

Toegewezen door synology

CVSS-score 5.4

Status PUBLISHED

Beschrijving

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors.

← Alle CVE's bekijken Bekijk op cve.org ↗