CVE-2024-29237

CVE-2024-29237 describes an SQL injection vulnerability in the ActionRule.Delete webapi component of Synology Surveillance Station. The issue affects versions prior to 9.2.0-11289 and 9.2.0-9289. When exploited by a remote authenticated attacker, it could allow reading data from the database cont...