PT-2023-26877 · Synology · Music Station

Fredoun · Publicado 2023-11-03 · Atualizado 2023-11-14 · CVE-2023-39299

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Music Station versions prior to 4.8.11 Music Station versions prior to 5.1.16 Music Station versions prior to 5.3.23

Description A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network.

Recommendations For Music Station versions prior to 4.8.11, update to version 4.8.11 or later. For Music Station versions prior to 5.1.16, update to version 5.1.16 or later. For Music Station versions prior to 5.3.23, update to version 5.3.23 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-39299

Produtos afetados

Music Station

Referências · 5

• https://qnap.com/en/security-advisory/qsa-23-61 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-39299 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-39299 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1720481389412544567 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1720533943055716646 · Publicação no Twitter