CVE-2019-11822

Severity CVSS v4.0:
Pending analysis
Type:
CWE-22 Path Traversal
Publication date:
30/06/2019
Last modified:
30/01/2023

Description

Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to upload arbitrary files via the uploadphoto parameter.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:* 6.3 (including) 6.3-2977 (excluding)
cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:* 6.8 (including) 6.8.11-3489 (excluding)


References to Advisories, Solutions, and Tools