Medium · 5.0 CVE-2021-34811 EUVD-2021-21458GHSA-h4r4-pw7f-hp8j

Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote…

Published Jun 18, 2021 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Download Station

Description

Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Download Station	unspecified – < 3.8.16-3566	3.8.16-3566

References

https://www.synology.com/security/advisory/Synology_SA_21_11