Security Advisory

CVE-2018-13299

4.3
MEDIUM

Vulnerability Description

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter.
Published Date April 1, 2019
Official Source NIST NVD Advisory