A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.CreditsQian Chen (@cq674350529) from Codesafe Team of Legendsec at QI-ANXIN GroupReferenceshttps://www.synology.com/en-global/security/advisory/Synology_SA_25_04