CVE-2024-50629

MEDIO 5.3CVE-2024-50629 · Published 19/03/2025 · updated 17/06/2026

In breve

CVE-2024-50629 è una vulnerabilità MEDIO (CVSS 5.3).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 31.9%, superiore al 98.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors.

References

synology.com/en-global/security/advisory/Synology_SA_24_20 · Vendor Advisory
synology.com/en-global/security/advisory/Synology_SA_24_23 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free