URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors.
References
Link | Resource |
---|---|
https://www.synology.com/en-global/security/advisory/Synology_SA_24_02 | Vendor Advisory |
Configurations
History
30 Jan 2024, 17:01
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:* | |
References | () https://www.synology.com/en-global/security/advisory/Synology_SA_24_02 - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
First Time |
Synology diskstation Manager
Synology |
24 Jan 2024, 10:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-24 10:15
Updated : 2024-02-28 20:54
NVD link : CVE-2024-0854
Mitre link : CVE-2024-0854
CVE.ORG link : CVE-2024-0854
JSON object : View
Products Affected
synology
- diskstation_manager
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')