CVE-2018-8913

https://notcve.org/view.php?id=CVE-2018-8913

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL. Una vulnerabilidad de ausencia de página de error personalizado en Synology Web Station, en versiones 2.1.3-0139, permite a los atacantes remotos realizar ataques de phishing mediante una URL manipulada • https://www.synology.com/security/advisory/Synology_SA_18_29 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') CWE-756: Missing Custom Error Page •