Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2018-13288

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive informati

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology File Station

  • unspecified to < 1.2.3-0252affected
  • unspecified to < 1.1.5-0125affected

References