| Package | Affected versions | Patched versions |
|---|---|---|
| download station | ≤ 3.5-2956 |
Cross-site scripting (XSS) vulnerability in the "Create download task via file upload" feature in Synology Download Station before 3.5-2962 allows remote attackers to inject arbitrary web script or HTML via the name element in the Info dictionary in a torrent file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free