Security Advisory
CVE-2021-29089
9.8
CRITICAL
Vulnerability Description
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors.
Published Date
June 2, 2021
Official Source
NIST NVD Advisory