CVE-2022-27620

Summary

CVE-2022-27620 is a Path Traversal vulnerability affecting the webapi component in Synology SSO Server prior to version 2.2.3-0331. This issue allows remote, authenticated users to access arbitrary files on the system through unspecified vectors, posing a significant risk to data confidentiality. The vulnerability arises from an improper limitation of a pathname to a restricted directory, enabling attackers to bypass intended access controls and potentially gain unauthorized access to sensitive information. Successful exploitation may lead to data theft or unauthorized system modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.