CVE-2022-36534: 
Homebrew vulnerability analysis and mitigation

CVE-2022-36534 is a remote code execution (RCE) vulnerability discovered in Syncovery 9 for Linux version 9.47x and below. The vulnerability was identified in the Web GUI of Syncovery File Sync & Backup Software for Linux, allowing authenticated users to execute arbitrary commands (NVD, MGM Security).

The vulnerability exists in the 'JobExecuteBefore' and 'JobExecuteAfter' parameters within post_profilesettings.php. It allows authenticated users to execute commands or scripts before/after running a profile. Since the software runs with root privileges by default, successful exploitation provides root access to the host system (MGM Security).

The vulnerability enables authenticated attackers to achieve complete compromise of the server running Syncovery. Due to the application running with root privileges by default, successful exploitation grants attackers root-level access to the host system (MGM Security).

The vulnerability has been fixed in Syncovery version 9.48j. Users running affected versions (9.47x and below, including all versions of branch 8) should upgrade to version 9.48j or later to mitigate this vulnerability (MGM Security).