Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | Surveillance Station | < 9.2.2-9575, < 9.2.2-11575 | 9.2.2-9575 |
References
- Synology-SA-24:25 Surveillance Station vendor-advisory