CVE-2024-53279

Summary

CVE-2024-53279 is a Cross-site Scripting (XSS) vulnerability affecting the file station functionality in Synology Router Manager (SRM) prior to version 1.3.1-9346-10. This issue allows remote, authenticated users with administrator privileges to inject arbitrary web scripts or HTML, potentially stealing sensitive information or executing malicious code on targeted systems. This vulnerability occurs due to improper neutralization of user input during web page generation. Users are recommended to update their SRM installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.