Skip to content
OpenAdvisories
Medium · 4.3 CVE-2018-13299 EUVD-2018-5247GHSA-rx7v-r27h-28rm

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to up…

Published Apr 1, 2019 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Calendar

Description

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter.

Affected products

VendorProductAffectedFixed
Synology Calendar unspecified – < 2.2.2-0532 2.2.2-0532

References