Skip to content
OpenAdvisories
Medium · 5.3 CVE-2018-13297 EUVD-2018-5245GHSA-78vv-7rrg-22r5

Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attackers to obtain sensi…

Published Apr 1, 2019 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Drive

Description

Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attackers to obtain sensitive system information via the dsm_path parameter.

Affected products

VendorProductAffectedFixed
Synology Drive unspecified – < 1.1.2-10562 1.1.2-10562

References