Description (CNA)
Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to upload arbitrary files via the uploadphoto parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / Photo Station | affected unspecified before 6.8.11-3489; affected unspecified before 6.3-2977 |
CWE
CWE-23
References
ADP enrichment
No English description supplied.