CVE-2015-9103

Опубликовано: 30 июн. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Synology Note Station 1.1-0212 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) note title or (2) file name of attachments.

Ссылки

http://www.fortiguard.com/zeroday/FG-VD-15-110
Third Party Advisory
http://www.fortiguard.com/zeroday/FG-VD-15-111
Third Party Advisory
https://www.synology.com/en-global/support/security/Note_Station_1_1_0214
Vendor Advisory
http://www.fortiguard.com/zeroday/FG-VD-15-110
Third Party Advisory
http://www.fortiguard.com/zeroday/FG-VD-15-111
Third Party Advisory
https://www.synology.com/en-global/support/security/Note_Station_1_1_0214
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:synology:note_station:*:*:*:*:*:*:*:*

Версия до 1.1-0212 (включая)

EPSS

Процентиль: 48%

0.00246

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-6f44-w97x-4j76