CVE-2024-13987 — Synology / RADIUS Server

CVE-2024-13987

Synology / RADIUS Server PUBLISHED

Description (CNA)

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors.

Affected (CNA)

Vendor / product	Versions
Synology / RADIUS Server	affected * before 3.0.27-0453; affected * before 3.0.27-0516; affected * before 3.0.27-0139

CWE

CWE-79

References

https://www.synology.com/en-global/security/advisory/Synology_SA_25_10

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.