CyberRota Analysis
AI-GeneratedAn improper neutralization of CRLF sequences vulnerability in the Sharing API of Synology DiskStation Manager allows remote authenticated users to exploit CRLF injection, potentially enabling them to write limited files when a victim interacts with a malicious sharing URL. While the severity is rated low, organizations using affected versions of DSM should prioritize patching to mitigate potential risks associated with unauthorized file manipulation. Users of Synology DiskStation Manager should update to the specified secure versions to protect against this vulnerability.
Original NVD Description
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write limited files when a victim clicks a sharing URL.