Skip to content
OpenAdvisories
High · 7.7 CVE-2021-29091 EUVD-2021-15732GHSA-67j5-jjhw-3h9m

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo…

Published Jun 2, 2021 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Synology Photo Station

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Synology Photo Station unspecified – < 6.8.14-3500 6.8.14-3500

References