Medium · 6.5 CVE-2022-22679 EUVD-2022-27824GHSA-fgfm-hjh9-vxjr

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology Disk…

Published Feb 7, 2022 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: DiskStation Manager (DSM)

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	DiskStation Manager (DSM)	unspecified – < 7.0.1-42218-2	7.0.1-42218-2

Advisories 1

WID-SEC-2025-2192 Synology DiskStation Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 5, 2025

References

https://www.synology.com/security/advisory/Synology_SA_22_01