Synology Hyper Backup Path Traversal Vulnerability in Backup.Repository WebAPI Component

A path traversal vulnerability has been identified in the Backup.Repository web API component of Synology Hyper Backup, affecting versions prior to 4.1.2-4036. This vulnerability allows remote authenticated users with administrator privileges to write specific files containing non-sensitive information to restricted directories, through unspecified vectors.

Impact

Exploitation of this vulnerability could lead to unauthorized file writing in restricted directories, potentially allowing for further exploitation or manipulation of the application or system.