CVE-2022-27617

概要

参考情報

• synology.com/security/advisory/Synology_SA_20_07 · Vendor Advisory

calendar のその他の脆弱性

• CVE-2022-22686高 8.0Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users…
• CVE-2022-22682中 5.4Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management in Synology Calendar …
• CVE-2021-34812高 7.5Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensit…
• CVE-2019-11829緊急 9.8OS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote attackers to execute…
• CVE-2019-11825中 5.4Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary …