CVE-2021-29091: Path Traversal
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-29091.
What is the title of this vulnerability?
The title of this vulnerability is 'Improper limitation of a pathname to a restricted directory ( Path Traversal ) vulnerability in file...'.
What is the description of this vulnerability?
The description of this vulnerability is 'Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.'
What software is affected by this vulnerability?
The Synology Photo Station software versions before 6.8.14-3500 are affected by this vulnerability.
What is the severity of this vulnerability?
The severity of this vulnerability is high with a CVSS score of 6.5.
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to update the Synology Photo Station software to version 6.8.14-3500 or higher.
Where can I find more information about this vulnerability?
More information about this vulnerability can be found at the following URL: https://www.synology.com/security/advisory/Synology_SA_20_20
What is the CWE ID of this vulnerability?
The CWE ID of this vulnerability is CWE-22.