CVE-2022-27620

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2022-27620

CVE-2022-27620 impacts the webapi component of Synology SSO Server prior to 2.2.3-0331. The vulnerability is a path traversal flaw that allows remote authenticated users to read arbitrary files via unspecified vectors. Affected product/version: Synology SSO Server (webapi) before 2.2.3-0331. Impa...

CVE-2022-27620

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors...