Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2018-8927

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology Calendar

  • unspecified to < 2.1.2-0511affected

References