CVE-2022-27615

CVE-2022-27615 affects Synology DNS Server prior to 2.2.2-5027, via a path traversal in the cgi component that can allow remote authenticated users to delete arbitrary files. The issue arises from improper restriction of pathnames to restricted directories. Connected sources confirm affected soft...