CVE-2022-22681

概要

参考情報

• synology.com/security/advisory/Synology_SA_21_26 · Vendor Advisory

photo station のその他の脆弱性

• CVE-2021-29089緊急 9.8Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo …
• CVE-2021-29091中 6.5Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo …
• CVE-2021-29090高 7.2Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Statio…
• CVE-2021-29092高 8.8Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allo…
• CVE-2019-11822中 6.5Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remo…