DiskStation Manager (< 7.2.1-69057-13, < 7.2.2-72806-10, < 7.3.2-86009-5, < 7.4.1-90080-1)

An improper neutralization of special elements used in an SQL command vulnerability in the Auth API of Synology DiskStation Manager (DSM) allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks.