Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite
7.5CVSS
7.4AI Score
0.001EPSS
Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message fro...
7.5CVSS
7AI Score
0.002EPSS
Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync malicious files which contain arbitrary HTML and JavaScript in the name. If the owner of another device looks over the shared folder settings and m...
5.4CVSS
5.1AI Score
0.001EPSS