PT-2017-7549 · Synology · Synology Photo Station

Publicado 2017-06-30 · Atualizado 2019-10-09 · CVE-2015-9102

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions 6.0 through 6.0-2637 Synology Photo Station versions 6.3 through 6.3-2961

Description The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the album name, file name of uploaded photos, description of photos, or tag of the photos.

Recommendations For Synology Photo Station versions 6.0 through 6.0-2637, update to version 6.0-2638 or later. For Synology Photo Station versions 6.3 through 6.3-2961, update to version 6.3-2962 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-9102

Produtos afetados

Synology Photo Station

Referências · 6

• http://fortiguard.com/zeroday/FG-VD-15-112 · Nota
• http://fortiguard.com/zeroday/FG-VD-15-104 · Nota
• http://fortiguard.com/zeroday/FG-VD-15-103 · Nota
• https://synology.com/en-global/support/security/Photo_Station_6_3_2962 · Aviso do Fabricante
• http://fortiguard.com/zeroday/FG-VD-15-109 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-9102 · Nota de Segurança