Lucene search
HistoryJul 28, 2022 - 7:15 a.m.
CVE-2022-22685
synology webdav server
path traversal
remote deletion
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS
0.001
Percentile
26.5%
Improper limitation of a pathname to a restricted directory (‘Path Traversal’) vulnerability in webapi component in Synology WebDAV Server before 2.4.0-0062 allows remote authenticated users to delete arbitrary files via unspecified vectors.
Affected configurations
Node
synologywebdav_serverRange<2.4.0-0062
| Vendor | Product | Version | CPE |
|---|---|---|---|
| synology | webdav_server | * | cpe:2.3:a:synology:webdav_server:*:*:*:*:*:*:*:* |
Related
cnvd
cnvd
Synology WebDAV Server Path Traversal Vulnerability
2022-07-30 00:00:00
prion
prion
Path traversal
2022-07-28 07:15:00
cvelist
cvelist
CVE-2022-22685
2022-07-28 06:45:13
cve
cve
CVE-2022-22685
2022-07-28 07:15:07
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS
0.001
Percentile
26.5%
Related for NVD:CVE-2022-22685