CVE-2017-12079CWE-552

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote…

published December 4, 2017

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via prog_id field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01845 · 78.7th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2017-12-04T19:00Z
EPSS history
Timeline
  • 04 DEC 19:00Z
    Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote…
    cvelistv5