CVE-2023-0142: Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8,...
6.5
CVSS
Description
Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.
Classification
CVE ID: CVE-2023-0142
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.5
Affected Products
Vendor: Synology
Product: DiskStation Manager (DSM)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.08% (probability of being exploited)
EPSS Percentile: 35.19% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://www.synology.com/en-global/security/advisory/Synology_SA_23_05https://www.synology.com/en-global/security/advisory/Synology_SA_23_06