CVE-2017-11148

Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.

Score

CVSS 3.0 6.5 Medium

Status

Modified - security@synology.com

Published

2017-08-11

Last modified

2024-09-17

Weaknesses

CWE-918

Affected products

• Chat (Synology)
• Synology Chat (Synology)

References

• http://www.securityfocus.com/bid/100310
• https://www.synology.com/en-global/support/security/Synology_SA_17_38_Chat