description: Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domain_name parameter.
problem types: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)
affected:
{
product: Synology DNS Server
vendor: Synology
versions:
status: affected, version: before 2.2.1-3042
}