CVE-2018-14707

CVE-2018-14707 describes a directory traversal in the Drobo Pix web application of Drobo 5N2 NAS (version 4.0.5-13.28.96115). The vulnerability allows unauthenticated attackers to upload files to arbitrary locations. Multiple connected sources corroborate a DroboPix-related path traversal affecti...