Back to feed
EUVD-2017-2783 · Published Aug 11, 2017
Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.
Technologies
Synology Chat
Weaknesses
CWE-918
CVSS scores
- v3.06.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - v2.04.0
AV:N/AC:L/Au:S/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
