Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Synology DiskStation Manager 路径遍历漏洞
Vulnerability Description
Synology DiskStation Manager（DSM）是中国台湾群晖科技（Synology）公司的一套用于网络储存服务器（NAS）上的操作系统。该操作系统可管理资料、文件、照片、音乐等信息。 Synology DiskStation Manager 中存在路径遍历漏洞，该漏洞源于产品对路径名限制不当。攻击者可通过该漏洞向任意路径写入文件。以下产品及版本受到影响：Synology DiskStation Manager 7.0.1-42218-2 之前版本。
CVSS Information
N/A
Vulnerability Type
N/A