Medium severity6.5NVD Advisory· Published Dec 8, 2017· Updated May 13, 2026
CVE-2017-15894
CVE-2017-15894
Description
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.
Affected products
2- cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*Range: >=5.2,<5.2-5967-6
- Synology/Synology DiskStation Manager (DSM)v5Range: 6.0.x before 6.0.3-8754-3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.synology.com/en-global/support/security/Synology_SA_17_70_DSMnvdVendor Advisory
News mentions
0No linked articles in our index yet.