Security Advisory
CVE-2019-11826
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users to upload arbitrary files via the name parameter.