Critical · 9.0 CVE-2021-27648 EUVD-2021-14394GHSA-55vq-f28f-xgcc

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-28…

Published Apr 28, 2021 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Synology Antivirus Essential

Description

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Antivirus Essential	unspecified – < 1.4.8-2801	1.4.8-2801

References

https://www.synology.com/security/advisory/Synology_SA_21_15