Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Synology |
|
Configuration 1 [-]
|
No data.
References
History
Mon, 17 Nov 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Synology
Synology beestation Os Synology diskstation Manager |
|
| CPEs | cpe:2.3:o:synology:beestation_os:1.0.1:65210:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0.2:65233:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0.2:65235:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0:-:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0:65145:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0:65149:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0:65162:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.1:-:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.1:65373:*:*:*:*:*:* cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Synology
Synology beestation Os Synology diskstation Manager |
Thu, 27 Mar 2025 09:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation Manager (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors. | Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors. |
Thu, 20 Mar 2025 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation Manager (BSM) before 1.1-65374, Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to read limited files via unspecified vectors. | Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation Manager (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors. |
Wed, 19 Mar 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 19 Mar 2025 06:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation Manager (BSM) before 1.1-65374, Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to read limited files via unspecified vectors. | |
| Weaknesses | CWE-116 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: synology
Published:
Updated: 2025-03-28T01:10:51.638Z
Reserved: 2024-10-28T02:41:27.549Z
Link: CVE-2024-50629
Vulnrichment
Updated: 2025-03-19T14:43:47.733Z
NVD
Status : Analyzed
Published: 2025-03-19T06:15:15.460
Modified: 2025-11-17T13:38:39.847
Link: CVE-2024-50629
Redhat
No data.