Path traversal

2021-06-0114:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

Improper limitation of a pathname to a restricted directory (‘Path Traversal’) vulnerability container volume management component in Synology Docker before 18.09.0-0515 allows local users to read or write arbitrary files via unspecified vectors.

CPENameOperatorVersion
dockereq< 18.9.0-515

CPE	Name	Operator	Version
	docker	eq	< 18.9.0-515

References

www.synology.com/security/advisory/Synology_SA_21_08