Path traversal

2022-07-2807:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

Improper limitation of a pathname to a restricted directory (‘Path Traversal’) vulnerability in webapi component in Synology WebDAV Server before 2.4.0-0062 allows remote authenticated users to delete arbitrary files via unspecified vectors.

CPENameOperatorVersion
webdav_servereq< 2.4.0-62

CPE	Name	Operator	Version
	webdav_server	eq	< 2.4.0-62

References

www.synology.com/security/advisory/Synology_SA_21_09