CVE Published: 28/03/2024 |
CVE Updated: 02/08/2024 |
CVE Year: 2024 Source: synology |
Vendor: Synology |
Product: Surveillance Station Status : PUBLISHED
CVE-2024-29238 Description
Improper neutralization of special elements used in an SQL command (\'SQL Injection\') vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to inject SQL commands via unspecified vectors.
Metrics
CVSS Version: 3.1 |
Base Score: 5.4 MEDIUM Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L