Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-27611 EUVD-2022-32112GHSA-q7hm-c2c2-qfqj

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station …

Published Jul 28, 2022 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Audio Station

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Audio Station unspecified – < 6.5.4-3367 6.5.4-3367

References