CVE-2018-13297

概要

参考情報

• synology.com/security/advisory/Synology_SA_18_50 · Vendor Advisory

drive server のその他の脆弱性

• CVE-2024-50631高 7.5Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology …
• CVE-2024-50630高 7.5Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280,…
• CVE-2018-8922中 6.5Improper access control vulnerability in Synology Drive before 1.0.2-10275 allows remote authenticated users to access non-shared files or f…
• CVE-2018-8921中 5.4Cross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remote authenticated users…
• CVE-2018-8910中 5.4Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inj…