Skip to content
OpenAdvisories
Medium · 5.6 CVE-2018-13282 EUVD-2018-5230GHSA-35x6-wg3h-rrv6

Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web …

Published Oct 31, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Photo Station

Description

Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Affected products

VendorProductAffectedFixed
Synology Photo Station unspecified – < 6.8.7-3481 6.8.7-3481

References