Path traversal

2019-04-0115:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

JSON

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter.

CPENameOperatorVersion
calendareq< 2.2.2-532

CPE	Name	Operator	Version
	calendar	eq	< 2.2.2-532

References

www.synology.com/security/advisory/Synology_SA_18_54