Snoviboy

The issue allows remote authenticated users to obtain sensitive information due to an information exposure vulnerability in the /usr/syno/etc/mount.conf configuration file.

A cross-site scripting (XSS) issue exists in the Control Panel SSO Settings of Synology DiskStation Manager (DSM), allowing remote authenticated users to inject arbitrary web script or HTML via the URL parameter.

A cross-site scripting (XSS) issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the `title` parameter. This could potentially lead to unauthorized actions on the affected system.