medium5.3
CVE-2018-13288
Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtai…
Impact
Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | File Station | from 1.1 before 1.1.5-0125 from 1.2 before 1.2.2-0250 |