Security Advisory

CVE-2021-29089

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-02 02:15:10
Last updated 2024-09-16 21:04:38
Assigner synology
State PUBLISHED

Description

Improper neutralization of special elements used in an SQL command (SQL Injection) vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors.