Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-27621 EUVD-2022-32122GHSA-5qww-32pm-m8vq

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy befor…

Published Aug 3, 2022 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: USB Copy

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology USB Copy unspecified – < 2.2.0-1086 2.2.0-1086

References