CVE-2021-33182: Path Traversal
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to read limited files via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-33182.
What is the title of this vulnerability?
The title of this vulnerability is 'Improper limitation of a pathname to a restricted directory ( Path Traversal ) vulnerability in PDF Viewer component in Synology DiskStation Manager (DSM) before 6.2.4-25553'.
What is the description of this vulnerability?
The description of this vulnerability is 'Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to read limited files via unspecified vectors.'
What is the affected software and version for this vulnerability?
The affected software and version for this vulnerability is Synology DiskStation Manager (DSM) before 6.2.4-25553.
What is the severity of this vulnerability?
The severity of this vulnerability is medium with a CVSS score of 4.3.
How can I fix this vulnerability?
To fix this vulnerability, you should update Synology DiskStation Manager (DSM) to version 6.2.4-25553 or later.