CVE-2017-15893: Synology File Station

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.

Affected products

• Synology File Station: before 1.1.1-0099 (fixed in 1.1.1-0099)

Published 2017-12-08. Last modified 2026-06-17.