CVE-2025-29845

Description

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.

Affected Platforms

Weakness Type

CWE-22

References

• https://www.synology.com/en-global/security/advisory/Synology_SA_25_04