CVE-2024-13987 – Synology RADIUS Server Cross-site Scripting Vulnerability

CVE ID : CVE-2024-13987

Published : Aug. 29, 2025, 8:15 a.m. | 32 minutes ago

Description : Improper neutralization of input during web page generation (‘Cross-site Scripting’) vulnerability in Synology RADIUS Server before 3.0.27-0139 allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors.

Severity: 5.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…