CVE-2024-50629
MEDIUM 5.3EPSS 31.7%
Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors.
- Affected
- Synology · DiskStation Manager (DSM) · BeeStation OS (BSM)
- CVSS v3.1 SYNOLOGY
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - EPSS
- 31.71% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2025-03-19
- Updated
- 2025-03-28
Proof-of-concept exploits (1)
- kiddo-pwn/CVE-2024-50629_5063141★ · 2025-11-30
Security advisories
- https://www.synology.com/en-global/security/advisory/Synology_SA_24_20
- https://www.synology.com/en-global/security/advisory/Synology_SA_24_23