CVE-2022-27618

Summary

CVE-2022-27618 is a path traversal vulnerability affecting the webapi component in Synology Storage Analyzer before version 2.1.0-0390. This issue allows remote, authenticated users to delete arbitrary files by exploiting an improper limitation of a pathname to a restricted directory. The exact vectors of attack are unspecified, but this flaw poses a significant risk to data integrity and confidentiality in Synology Storage Analyzer installations. System administrators are advised to update their installations to the latest version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.