PT-2017-12341
CVE-2017-12079
·
Published
2017-12-04
·
Updated
2019-10-09
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Synology Photo Station versions prior to 6.8.1-3458
Synology Photo Station versions prior to 6.3-2970
Description
The issue allows remote attackers to obtain arbitrary files. This is achieved via the
prog id field in the picasa.php file.Recommendations
For versions prior to 6.8.1-3458, update to version 6.8.1-3458 or later.
For versions prior to 6.3-2970, update to version 6.3-2970 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾