Medium severity6.5NVD Advisory· Published Aug 11, 2017· Updated May 13, 2026
CVE-2017-11148
CVE-2017-11148
Description
Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.
Affected products
1- Synology/Synology Chatv5Range: before 1.1.0-0806
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/100310nvdThird Party AdvisoryVDB Entry
- www.synology.com/en-global/support/security/Synology_SA_17_38_ChatnvdVendor Advisory
News mentions
0No linked articles in our index yet.