CVE-2017-11148: Synology Chat

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.

Affected products

• Synology Chat: up to and including 1.0.2-0159

Published 2017-08-11. Last modified 2026-06-17.