Design/Logic Flaw

2021-04-2808:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors.

CPENameOperatorVersion
antivirus_essentialeq< 1.4.8-2801

CPE	Name	Operator	Version
	antivirus_essential	eq	< 1.4.8-2801

References

www.synology.com/security/advisory/Synology_SA_21_15