Beveiligingsadvies

CVE-2024-53288

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-23 04:11:58
Laatst bijgewerkt 2025-07-23 15:14:16
Toegewezen door synology
CVSS-score 5.9
Status PUBLISHED

Beschrijving

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via unspecified vectors.