description: URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors.
problem types: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
vendor: Synology
product: DiskStation Manager (DSM)
versions:
version: 7.2, status: affected, lessThan: 7.2.1-69057-2, versionType: semver
version: 7.1, status: affected, lessThan: 7.1.*, versionType: semver
version: 6.2, status: affected, lessThan: 6.2.*, versionType: semver
version: 0, status: unknown, lessThan: 6.2, versionType: semver
defaultStatus: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseScore: 4.1
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
]