CVE-2022-43748: Synology Presto File Server

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows remote attackers to write arbitrary files via unspecified vectors.

Affected products

• Synology Presto File Server: before 2.1.2-1601 (fixed in 2.1.2-1601)

Published 2022-10-26. Last modified 2026-06-17.