Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | Synology DiskStation Manager (DSM) | unspecified – < 6.2.4-25553 | 6.2.4-25553 |