CVE-2021-29091

No fix known EPSS 1%CVSS 7.7

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.

Published 2021-06-02 · CVE record · OSV

Products: synology_photo_station