writeups.xyz / CVE-2021-29084: Exploiting CRLF Header Injection in Synology NAS for Unauthenticated File Downloads

Submitter : c2a

Date: 1 June 2021

Bounty : undisclosed

Vulnerabilities :

• CRLF Injection

Programs :

• Synology

Authors :

• Justin Taft

Link :
https://justintaft.com/blog/2021/06/01/cve-2021-29084-synology-crlf-unauthenticated-file-downloads