← Database

CVE-2022-22686

MEDIUM CVSS: 6.5 Published: 2022-07-26 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to hijack the authentication of administrators via unspecified vectors.

Affected Platforms

Synology Calendar

Weakness Type

CWE-352

References