Synology Active Backup for Business Path Traversal Vulnerability in Encrypted Share Umount Functionality

A path traversal vulnerability has been identified in Synology Active Backup for Business versions prior to 2.7.1-13234, 2.7.1-23234, and 2.7.1-3234. This vulnerability allows remote authenticated users to write specific files by improperly limiting the pathname to a restricted directory during the encrypted share unmounting process.

Impact

Exploitation of this vulnerability allows for arbitrary file writing by remote authenticated users with administrator privileges.

Remediation

Users can upgrade to Synology Active Backup for Business version 2.7.1-23234 or above on DSM 7.2, version 2.7.1-13234 or above on DSM 7.1, or version 2.7.1-3234 or above on DSM 6.2.