CVE-2024-13987

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-13987
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.7 / Impact : 3.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://www.synology.com/en-global/security/advisory/Synology_SA_25_10
Configurations

No configuration.

History

01 Sep 2025, 02:15

Type Values Removed Values Added
Summary (en) Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server before 3.0.27-0139 allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors. (en) Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors.

29 Aug 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-29 08:15

Updated : 2025-09-01 02:15

NVD link : CVE-2024-13987

Mitre link : CVE-2024-13987

CVE.ORG link : CVE-2024-13987

JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')