CoreCVE
Back

MEDIUM

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors

Published Mar 28, 2024

Description

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-89

SQL Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner synology
Published Mar 28, 2024
Updated Aug 1, 2025
Reserved Mar 19, 2024
Link CVE-2024-29232
CISA Vulnrichment
Updated Jul 17, 2024
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2024-29232
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-29232