Authorization

2018-06-1414:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter.

CPENameOperatorVersion
calendareq< 2.1.2-511

CPE	Name	Operator	Version
	calendar	eq	< 2.1.2-511

References

www.synology.com/en-global/support/security/Synology_SA_18_16