CVE-2017-11148

Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.

• CWE-918
• CWE-918

• http://www.securityfocus.com/bid/100310Third Party Advisory, VDB Entry
• https://www.synology.com/en-global/support/security/Synology_SA_17_38_ChatVendor Advisory
• http://www.securityfocus.com/bid/100310Third Party Advisory, VDB Entry
• https://www.synology.com/en-global/support/security/Synology_SA_17_38_ChatVendor Advisory

Published

Aug 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11142In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.…
• CVE-2017-11143In PHP before 5.6.31, an invalid free in the WDDX deserializ…
• CVE-2017-11144In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.…
• CVE-2017-11145In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.…
• CVE-2017-11146Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-11147In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive…9.1
• CVE-2017-11149Server-side request forgery (SSRF) vulnerability in Download…
• CVE-2017-1115IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML inject…5.4
• CVE-2017-11150Command injection vulnerability in Document.php in Synology …
• CVE-2017-11151A vulnerability in synotheme_upload.php in Synology Photo St…
• CVE-2017-11152Directory traversal vulnerability in PixlrEditorHandler.php …
• CVE-2017-11153Deserialization vulnerability in synophoto_csPhotoMisc.php i…