PT-2021-20066 · Synology · Synology Diskstation Manager

·

CVE-2021-33182

·

Published

2021-06-01

·

Updated

2025-01-14

CVSS v3.1

5.0

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager (DSM) versions prior to 6.2.4-25553
Description The issue is related to a Path Traversal vulnerability in the PDF Viewer component. This allows remote authenticated users to read limited files.
Recommendations For versions prior to 6.2.4-25553, update to version 6.2.4-25553 or later to resolve the issue.

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2021-33182

Affected Products

Synology Diskstation Manager