Description
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | Synology Router Manager (SRM) | before 1.1.5-6542-4 | — |