CVE-2018-13293: XSS
Published Apr 1, 2019
·Updated
Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter.
Affected Software
2 affected components
Synology Diskstation Manager>=5.2<6.2.1-23824
Synology Diskstation Manager>=5.2<6.2.1-23824
Event History
Apr 1, 2019
CVE Published
via MITRE·02:28 PM
Data Sourced
via MITRE·02:28 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-13293?
CVE-2018-13293 is classified as a high-severity cross-site scripting vulnerability.
2
How do I fix CVE-2018-13293?
To fix CVE-2018-13293, upgrade Synology DiskStation Manager to version 6.2.1-23824 or later.
3
Who is affected by CVE-2018-13293?
Remote authenticated users of Synology DiskStation Manager versions prior to 6.2.1-23824 are affected by CVE-2018-13293.
4
What type of vulnerability is CVE-2018-13293?
CVE-2018-13293 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2018-13293 be exploited remotely?
Yes, CVE-2018-13293 can be exploited remotely by authenticated users.