CVE-2017-12074 - AskarLabs CVE Database

CVE-2017-12074

Vendor Synology

Product Synology DNS Server

Weakness CWE-22 · Path traversal

Published August 24, 2017

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domain_name parameter.

Key dates

02Disclosure timeline

August 24, 2017 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-12074 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2022-2560 CVE-2023-49735 Apache Tiles: Unvalidated input may lead to path traversal and XXE CVE-2020-36893 Eibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability CVE-2025-1543 iteachyou Dreamer CMS ueditor-1.4.3.3 path traversal CVE-2026-27886 Strapi may leak sensitive data via relational filtering due to lack of query sanitization