Synology Drive Server vulnerabilities

2 known vulnerabilities in Synology Drive Server from Synology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Synology Drive Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-50631Mar 19, 2025SynologyEPSS 26.8%

  Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to inject SQL commands

• 7.5 High severity

  Synology Drive Server: Missing Authentication for Critical Functionality

  CVE-2024-50630Mar 19, 2025SynologyEPSS 24.6%

  Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to obtain administrator credentials via unspecified vectors.