description: Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors.
problem types: Directory Traversal (CWE-22); Privilege Escalation (CWE-269)
affected:
{
product: Synology Photo Station
vendor: Synology
versions:
status: affected, version: All versions prior to version 6.5.3-3226
}