CVE-2021-33184 — Synology / Synology Download Station

CVE-2021-33184

Synology / Synology Download Station PUBLISHED

Description (CNA)

Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Download Station	affected unspecified before 3.8.15-3563

CWE

CWE-918

References

https://www.synology.com/security/advisory/Synology_SA_20_23

ADP enrichment

CVE

No English description supplied.

https://www.synology.com/security/advisory/Synology_SA_20_23