Presto File Server vulnerabilities

2 known vulnerabilities in Presto File Server from Synology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Presto File Server: Improper Privilege Management

  CVE-2022-43749Oct 26, 2022Synology

  Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-1601 allows remote authenticated users to bypass security constraint via unspecified vectors.

• 7.5 High severity

  Presto File Server: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-43748Oct 26, 2022Synology

  Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows remote attackers to write arbitrary files via unspecified vectors.