Synology DiskStation Manager Path Traversal (CVE-2022-22679)

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in support service management in Synology DiskStation Manager DSM before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors. This plugin only works with...

Synology DiskStation Manager (DSM) 6.2.x < 6.2.4-25556-3, 7.x < 7.0.1-42218-2 Multiple Vulnerabilities (Synology-SA-22:01) - Remote Known Vulnerable Versions Check

Synology DiskStation Manager DSM is prone to a OS command injection vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-22679

Synopsis: CVE-2022-22679 affects Synology DiskStation Manager (DSM). Vulnerability: Path traversal due to improper limitation of a pathname to a restricted directory, enabling remote authenticated users to write arbitrary files via unspecified vectors. Affected versions: DSM before 7.0.1-42218-2....