Skip to content
OpenAdvisories
High · 7.7 CVE-2022-27615 EUVD-2022-32116GHSA-9q4r-rvww-q2rv

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server before…

Published Jul 28, 2022 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: DNS Server

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology DNS Server unspecified – < 2.2.2-5027 2.2.2-5027

References