CVE-2024-53280 | BDVDB-2026-258243 Detail

Description#

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center policy route functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information and conduct limited denial-of-service attacks by injecting arbitrary web script or HTML.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-12-09Record published in the CVE List.
2. Version 22025-08-01Most recent update recorded in the CVE List.