Medium · 6.6 CVE-2021-33181 EUVD-2021-19896GHSA-6q24-858g-34rg

Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticat…

Published Jun 1, 2021 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology Video Station

Description

Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to intranet resources via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Video Station	unspecified – < 2.4.10-1632	2.4.10-1632

References

https://www.synology.com/security/advisory/Synology_SA_21_04