Security Advisory

CVE-2019-11826

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-30 15:00:13
Last updated 2024-09-16 16:43:02
Assigner synology
State PUBLISHED

Description

Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users to upload arbitrary files via the name parameter.