CVE-2017-12071CWE-918

Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users…

published September 8, 2017

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to download arbitrary local files via the url parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01372 · 71.7th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2017-09-08T14:00Z
EPSS history
Timeline
  • 08 SEP 14:00Z
    Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users…
    cvelistv5