CVE-2017-11150

Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands…

published August 14, 2017

CVSS
—
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01628 · 76.0th percentile
Published
2017-08-14T19:00Z
EPSS history
Timeline
  • 14 AUG 19:00Z
    Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands…
    cvelistv5