PT-2017-11774
CVE-2017-11149
·
تاريخ النشر
2017-08-14
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Synology Download Station versions 3.8.x before 3.8.5-3475
Synology Download Station versions 3.x before 3.5-2984
Description
A server-side request forgery (SSRF) issue in the Downloader component of Synology Download Station allows remote authenticated users to download arbitrary local files by crafting a URI.
Recommendations
For Synology Download Station versions 3.8.x before 3.8.5-3475, update to version 3.8.5-3475 or later.
For Synology Download Station versions 3.x before 3.5-2984, update to version 3.5-2984 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾