CVE-2022-22686

MEDIUM · CVSS 6.5 EPSS 0.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-07-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-22686

Severity

MEDIUM

CVSS

6.5

EPSS

0.32%

Original NVD Description

Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to hijack the authentication of administrators via unspecified vectors.