Beveiligingsadvies

CVE-2024-29228

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-28 06:13:20
Laatst bijgewerkt 2024-08-02 01:10:55
Toegewezen door synology
CVSS-score 7.7
Status PUBLISHED

Beschrijving

Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors.