CVE-2016-10331

CVE-2016-10331

Vendor Synology
Product Synology Photo Station
Weakness CWE-22 · Path traversal
Published May 12, 2017
Last update August 6, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter.

Key dates

02Disclosure timeline

May 12, 2017 CVE published
August 6, 2024 Record updated