← CVE Intelligence

CVE-2017-15894

Synology / Synology DiskStation Manager (DSM) PUBLISHED

Description (CNA)

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.

Affected (CNA)

Vendor / productVersions
Synology / Synology DiskStation Manager (DSM)affected 6.0.x before 6.0.3-8754-3; affected before 5.2-5967-6

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.