PT-2022-18523

CVE-2022-27618

·

Published

2022-08-03

·

Updated

2025-01-14

Description by

CVSS 3.1
6.8
Medium
MetricsAV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Synology Storage Analyzer versions prior to 2.1.0-0390
Description The issue is related to a Path Traversal vulnerability in the webapi component, allowing remote authenticated users to delete arbitrary files via unspecified vectors.
Recommendations For versions prior to 2.1.0-0390, update to version 2.1.0-0390 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2022-27618
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com