Description
Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | DiskStation Manager (DSM) | unspecified – < 6.2-23739-2 | 6.2-23739-2 |