Skip to content
OpenAdvisories
Medium · 5.8 CVE-2022-43748 EUVD-2022-46725GHSA-86gc-h854-7wv3

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology Prest…

Published Oct 26, 2022 · Updated Apr 25, 2025 · Assigned by synology

Vendor: Synology Product: Presto File Server

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows remote attackers to write arbitrary files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Presto File Server unspecified – < 2.1.2-1601 2.1.2-1601

References