Vulnerabilities > CVE-2018-8927 - Incorrect Authorization vulnerability in Synology Calendar
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 8 |