CVE-2022-27613

높음 8.8CVE-2022-27613 · Published 28/07/2022 · updated 17/06/2026

요약

CVE-2022-27613은(는) carddav server (synology)에 영향을 주는 높음 (CVSS 8.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.1%, 전체 취약점의 65.4%보다 높음.
조치: 6.0.10-0153 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
carddav server synology	`< 6.0.10-0153`	`6.0.10-0153`

Description

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in webapi component in Synology CardDAV Server before 6.0.10-0153 allows remote authenticated users to inject SQL commands via unspecified vectors.

References

synology.com/security/advisory/Synology_SA_21_06 · Vendor Advisory

carddav server의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free