Information disclosure

2019-04-0115:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

JSON

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.

CPENameOperatorVersion
file_stationge1.1
file_stationlt1.1.5
file_stationge1.2
file_stationlt1.2.2

Name	Operator	Version
file_station	ge	1.1
file_station	lt	1.1.5
file_station	ge	1.2
file_station	lt	1.2.2

References

www.synology.com/security/advisory/Synology_SA_18_35