Security Advisory

CVE-2024-13987

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-29 07:20:21
Last updated 2025-09-01 01:34:03
Assigner synology
State PUBLISHED

Description

Improper neutralization of input during web page generation (Cross-site Scripting) vulnerability in Synology RADIUS Server allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors.