High · 7.7 CVE-2021-33184 EUVD-2021-19899GHSA-xqrp-5pxm-3qxh

Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote…

Published Jun 1, 2021 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology Download Station

Description

Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Download Station	unspecified – < 3.8.15-3563	3.8.15-3563

References

https://www.synology.com/security/advisory/Synology_SA_20_23