Skip to content
OpenAdvisories
High · 8.0 CVE-2019-11826 EUVD-2019-3492GHSA-grrh-qm2j-m48f

Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users…

Published Jun 30, 2019 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Photo Moments

Description

Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users to upload arbitrary files via the name parameter.

Affected products

VendorProductAffectedFixed
Synology Photo Moments unspecified – < 1.3.0-0691 1.3.0-0691

References