CVE-2022-27618

CVE-2022-27618 affects Synology Storage Analyzer prior to 2.1.0-0390. The vulnerability is a Path Traversal in the webapi component that, if exploited by remote authenticated users, enables deletion of arbitrary files. The issue stems from improper restriction of pathnames to restricted directori...