CVE-2024-29234

Synology Surveillance Station's Group.Save webapi is affected by an SQL Injection in versions prior to 9.2.0-11289 and 9.2.0-9289. An authenticated remote attacker could read non-sensitive data and trigger limited DoS via unspecified vectors. Root cause: improper neutralization of special element...

PT-2024-22830 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-11289 Synology Surveillance Station version 9.2.0-9289 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL...