CVE-2024-29230

Published: 2024-03-28T07:16Z

Last Modified: 2025-01-14T21:21Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to inject SQL commands via unspecified vectors. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt