Unscored CVE-2017-15893 EUVD-2017-7312GHSA-4vm2-7hg5-xh55

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated us…

Published Dec 8, 2017 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology File Station

Description

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology File Station	before 1.1.1-0099	—

References

https://www.synology.com/en-global/support/security/Synology_SA_17_69_File_Station