VYPR

by Synology

CVEs (1)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2017-11150Hig0.517.80.03Aug 14, 2017Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents.