CVE-2017-18263

Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url...

CVE-2017-18263

Seagate Personal Cloud is affected: Seagate Media Server before 4.3.18.4 contains a directory traversal vulnerability in getPhotoPlaylistPhotos.psp via the url parameter. The issue can allow an attacker to retrieve sensitive information from the NAS. No exploit details are provided in the sources...