CVE-2017-15886CWE-918

Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary…

published December 28, 2017

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary local files via a crafted URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01644 · 76.2th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2017-12-28T15:00Z
EPSS history
Timeline
  • 28 DEC 15:00Z
    Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary…
    cvelistv5