CVE-2021-43929

Summary

CVE-2021-43929 is a vulnerability affecting Synology DiskStation Manager (DSM) before version 7.0.1-42218-2. This issue involves improper neutralization of special elements in output, allowing remote authenticated users to inject arbitrary web scripts or HTML through unspecified vectors in the work flow management component. This Injection vulnerability poses a significant risk, as attackers could potentially manipulate the DSM's functionality and gain unauthorized access or steal sensitive information. Users are strongly encouraged to upgrade to a patched version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.