← Database

CVE-2023-0142

MEDIUM CVSS: 6.5 Published: 2023-06-13 Modified: 2026-06-17

Description

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.

Affected Platforms

Synology Diskstation Manager Unified ControllerSynology Diskstation ManagerSynology Router Manager

Weakness Type

CWE-427

References