CVE-2017-18263

Seagate Personal Cloud is affected: Seagate Media Server before 4.3.18.4 contains a directory traversal vulnerability in getPhotoPlaylistPhotos.psp via the url parameter. The issue can allow an attacker to retrieve sensitive information from the NAS. No exploit details are provided in the sources...

CVE-2017-18263

Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url...