PT-2018-18724
CVE-2018-8926
·
تاريخ النشر
2018-06-08
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Synology Photo Station versions prior to 6.8.5-3471
Synology Photo Station versions prior to 6.3-2975
Description
The issue is related to a permissive regular expression vulnerability in the synophoto dsm user component of Synology Photo Station. This vulnerability allows remote authenticated users to conduct privilege escalation attacks. The attack is carried out via the
fullname parameter.Recommendations
For versions prior to 6.8.5-3471, update to version 6.8.5-3471 or later.
For versions prior to 6.3-2975, update to version 6.3-2975 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾