CVE-2017-11162

Summary

Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected Software

VendorProductVersion RangeStatus
SynologySynology Photo Stationbefore 6.7.4-3433 and 6.3-2968affected

Weaknesses

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)

ADP Enrichment

CVE Program Container

Additional References

References