Description
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | Synology Router Manager (SRM) | 1.3 – < 1.3.1-9346-13 | 1.3.1-9346-13 |
Advisories 1
- WID-SEC-2025-0567 Synology Router Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 4, 2025
References
- Synology-SA-25:04 SRM vendor-advisory