Unrated severityNVD Advisory· Published Jun 23, 2021· Updated Sep 16, 2024

CVE-2021-29084

Description

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Synology/Diskstation Managerllm-fuzzy2 versions
<6.2.3-25426-3+ 1 more
- (no CPE)range: <6.2.3-25426-3
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

www.synology.com/security/advisory/Synology_SA_20_26mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000