CVE-2017-11149CWE-918

Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote…

published August 14, 2017

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01599 · 75.4th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2017-08-14T19:00Z
EPSS history
Timeline
  • 14 AUG 19:00Z
    Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote…
    cvelistv5