CVE-2018-13288

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.

Score

CVSS 3.0 5.3 Medium

Status

Modified - security@synology.com

Published

2019-04-01

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• File Station (Synology)

References

• https://www.synology.com/security/advisory/Synology_SA_18_35