CVE-2017-11149 - AskarLabs CVE Database

CVE-2017-11149

Vendor Synology

Product Synology Download Station

Weakness CWE-918 · SSRF

Published August 14, 2017

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.

Key dates

02Disclosure timeline

August 14, 2017 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-11149 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/918.html

Related vulnerabilities

04Related CVE

CVE-2024-37157 Discourse vulnerable to Server-Side Request Forgery via FastImage CVE-2025-47484 WordPress Display Remote Posts Block plugin <= 1.1.0 - Server Side Request Forgery (SSRF) Vulnerability CVE-2026-32279 Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin CVE-2017-15886 CVE-2026-4308 frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgery