description: Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.
problem types: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)
affected:
{
product: Synology Router Manager (SRM)
vendor: Synology
versions:
status: affected, version: before 1.1.5-6542-4
}