| Package | Affected versions | Patched versions |
|---|---|---|
| surveillance station | < 9.2.0-11289< 9.2.0-9289 | 9.2.0-112899.2.0-9289 |
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free