Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-27620 EUVD-2022-32121GHSA-6qj5-cmpw-fvpq

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server bef…

Published Aug 3, 2022 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: SSO Server

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology SSO Server unspecified – < 2.2.3-0331 2.2.3-0331

References