CVE-2019-11826 — Synology / Photo Moments

CVE-2019-11826

Synology / Photo Moments PUBLISHED

Description (CNA)

Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users to upload arbitrary files via the name parameter.

Affected (CNA)

Vendor / product	Versions
Synology / Photo Moments	affected unspecified before 1.3.0-0691

CWE

CWE-23

References

https://www.synology.com/security/advisory/Synology_SA_19_05

ADP enrichment

CVE

No English description supplied.

https://www.synology.com/security/advisory/Synology_SA_19_05