CVE-2018-13293
CVSS 3.0 Score 5.4 of 10 (medium)
Details
Published Apr 1, 2019
Updated: Jan 14, 2025
CWE ID 79
Summary
CVE-2018-13293 is a Cross-Site Scripting (XSS) vulnerability affecting Synology DiskStation Manager (DSM) before version 6.2.1-23824. This issue allows remote, authenticated users to inject arbitrary web scripts or HTML code via the URL parameter in the Control Panel SSO Settings. Successful exploitation of this vulnerability could result in unauthorized access, data theft, or other malicious actions on the affected system. To mitigate this risk, it is recommended that users upgrade to the latest version of DSM as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DiskStation Manager
Affected Vendors
- Synology