CVE-2017-15893

This CVE refers to a directory traversal vulnerability in SYNO.FileStation.Extract, affecting Synology File Station prior to 1.1.1-0099. The flaw allows remote authenticated users to write arbitrary files via the dest_folder_path parameter, enabling potential integrity/availability impact as desc...

CVE-2018-8923

CVE-2018-8923 describes a Cross-Site Scripting (XSS) vulnerability in the Attachment Preview component of Synology File Station. Affected versions are prior to 1.1.4-0122. The issue allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments, with the impact...

CVE-2018-13288

Synology File Station vulnerability CVE-2018-13288 affects SYNO.FolderSharing.List prior to 1.2.3-0252 and prior to 1.1.5-0125. The issue allows remote attackers to disclose information via the folder_path or real_path parameter, exposing sensitive data. Exploitation details beyond the descriptio...