Description (CNA)
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / Synology Photo Station | affected before 6.7.3-3432 and 6.3-2967 |
CWE
CWE-287
References
- https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation
- https://www.exploit-db.com/exploits/42434/
ADP enrichment
No English description supplied.