Synology: >> Diskstation Manager >> 7.1.1-42962-3 Security Vulnerabilities
URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7, 7.1.1-42962-7 and 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors.
CVSS Score
5.4
EPSS Score
0.002
Published
2024-01-24
Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.
CVSS Score
5.9
EPSS Score
0.003
Published
2023-06-13