Security Advisory

CVE-2024-29227

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-28 06:08:34

Last updated 2025-08-01 03:46:55

Assigner synology

State PUBLISHED

Description

Improper neutralization of special elements used in an SQL command (SQL Injection) vulnerability in Layout.LayoutSave webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors.

← Browse all CVEs View on cve.org ↗