Skip to content
OpenAdvisories
High · 8.7 CVE-2022-22685 EUVD-2022-27830GHSA-8wg2-h7mh-v5qc

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology WebDAV Server …

Published Jul 28, 2022 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: WebDAV Server

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology WebDAV Server before 2.4.0-0062 allows remote authenticated users to delete arbitrary files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology WebDAV Server unspecified – < 2.4.0-0062 2.4.0-0062

References