6.5

CVE-2024-47265

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users to write specific files via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synology ≫ Active Backup For Business Agent Version < 2.7.1-13234
   Synology ≫ Diskstation Manager Version7.1
Synology ≫ Active Backup For Business Agent Version < 2.7.1-3234
   Synology ≫ Diskstation Manager Version6.2
Synology ≫ Active Backup For Business Agent Version < 2.7.1-23234
   Synology ≫ Diskstation Manager Version7.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.09% 0.267
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@synology.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-73 External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.