Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-10443 EUVD-2024-33123GHSA-8vv5-qvx6-mqw7

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synol…

Published Nov 15, 2024 · Updated Sep 16, 2025 · Assigned by synology

Vendor: Synology Product: BeePhotos Product: Synology Photos

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and 1.1.0-10053 and Synology Photos before 1.6.2-0720 and 1.7.0-0795 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology BeePhotos < 1.1.0-10053, < 1.0.2-10026 1.1.0-10053
Synology Synology Photos < 1.7.0-0795, < 1.6.2-0720 1.7.0-0795

References