Skip to content
OpenAdvisories
Medium · 4.1 CVE-2024-47263 EUVD-2024-55609GHSA-qqc4-wwg4-7292

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Sy…

Published Jun 3, 2026 · Updated Jun 3, 2026 · Assigned by synology

Vendor: Synology Product: Hyper Backup

Description

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036 allows remote authenticated users with administrator privileges to write specific files containing non-sensitive information via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Hyper Backup < 4.1.2-4036 4.1.2-4036

References