EUVD-2026-67463
GHSA-6788-84vh-frqm
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Authenticated Chat account required (PR:L), victim UI interaction required (UI:R); scope change (S:C) justified by XSS impact reaching DSM file system beyond Chat boundary.
Primary rating from Vendor (synology).
CVSS VectorVendor: synology
Lifecycle Timeline
2DescriptionCVE.org
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks in DSM.
AnalysisAI
Cross-site scripting in Synology Chat Server's extract domain feature allows authenticated remote users to inject malicious scripts that execute upon victim UI interaction, with impact extending beyond the Chat application into the broader DSM (DiskStation Manager) environment. The scope change captured in the CVSS vector (S:C) is the key risk amplifier: successful exploitation can result in reading or writing restricted DSM files and conducting limited denial-of-service against DSM. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two concrete prerequisites: first, the attacker must hold a valid, authenticated Synology Chat Server account (PR:L per CVSS); second, a victim user must actively interact with the attacker-supplied content via the Chat Server UI (UI:R per CVSS). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS 6.5 Medium rating is proportionate for this vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Synology Chat Server to version 2.4.5-22148 or later as directed by Synology Security Advisory SA_26_10 (https://www.synology.com/en-global/security/advisory/Synology_SA_26_10). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Synology Chat Server
View allStored/reflected cross-site scripting in Synology Chat Server before 2.4.5-22148 lets a remote authenticated user who lu
Server-Side Request Forgery in Synology Chat Server's webhook functionality allows remote authenticated users to probe i
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today