description: Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path parameter.
problem types: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)
affected:
{
product: Synology Photo Station
vendor: Synology
versions:
status: affected, version: before 6.7.3-3432 and 6.3-2967
}