CVE-2015-9104

CVE-2015-9104

Vendor Synology
Product Audio Station
Weakness CWE-79 · XSS
Published June 30, 2017
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title.

Key dates

02Disclosure timeline

June 30, 2017 CVE published
September 17, 2024 Record updated