Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2019-11826

Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users to upload arbitrary files via the name p

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users to upload arbitrary files via the name parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology Photo Moments

  • unspecified to < 1.3.0-0691affected

References