CVE-2025-8074
BaseFortify
Publication date: 2025-12-04
Last updated on: 2026-02-04
Assigner: Synology Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| synology | beedrive | 1.4.3-13973 |
| synology | beedrive | to 1.4.3-13973 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-346 | The product does not properly verify that the source of data or communication is valid. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
The vulnerability can allow a local user to write arbitrary files, which may lead to integrity issues or disruption of service, but it does not compromise sensitive information.
Can you explain this vulnerability to me?
This vulnerability is an origin validation error in Synology BeeDrive for desktop versions before 1.4.3-13973. It allows local users to write arbitrary files containing non-sensitive information through unspecified methods.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
Since the vulnerability involves writing non-sensitive information only and does not affect confidentiality, it is unlikely to directly impact compliance with standards like GDPR or HIPAA.