Description (CNA)
Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / Calendar | affected unspecified before 2.2.2-0532 |
CWE
CWE-23
References
ADP enrichment
No English description supplied.