CVE-2024-0854

5.4 mediumEPSS 0.4%

Medium (5.4) in synology diskstation manager. EPSS 0.4% chance of exploitation in the next 30 days.

URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7, 7.1.1-42962-7 and 7.2.1-69057-2 allows remote authenticated users to conduct phishing attacks via unspecified vectors.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2024-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

synology:diskstation_manager

References

https://www.synology.com/en-global/security/advisory/Synology_SA_24_02
https://www.synology.com/en-global/security/advisory/Synology_SA_24_02

Check your stack JSON