Security Advisory

CVE-2018-13288

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-04-01 14:27:25
Last updated 2024-09-17 00:07:02
Assigner synology
State PUBLISHED

Description

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.