CVE-2024-47273

20th percentile - higher than 20% of all known CVEs

An improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036 allows remote authenticated users to write specific files via unspecified vectors.

An authenticated attacker can write files to unauthorized locations, potentially leading to privilege escalation or system integrity compromise.

Update Synology Hyper Backup to version 4.1.2-4036 or later, which includes the fix.