high7.7
CVE-2021-29091
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.…
Impact
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Photo Station | from 6.8 before 6.8.14-3500 |