EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below.
References
Link | Resource |
---|---|
https://www.asustor.com/security/security_advisory_detail?id=25 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: ASUSTOR1
Published: 2023-05-31T09:26:31.581Z
Updated: 2023-06-07T08:08:19.073Z
Reserved: 2023-05-26T09:43:49.971Z
Link: CVE-2023-2909
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-05-31T10:15:09.577
Modified: 2023-06-07T14:04:32.317
Link: CVE-2023-2909
JSON object: View
Redhat Information
No data.
CWE