Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter.
CVSS Information
N/A
Vulnerability Type
文件和路径信息暴露
Vulnerability Title
Synology Surveillance Station 信息泄露漏洞
Vulnerability Description
Synology Surveillance Station是群晖科技（Synology）公司的影像管理应用程序。User Profile是其中的一个用户信息存储文件。 Synology Surveillance Station 8.1.2-5469之前的版本中的SYNO.SurveillanceStation.PersonalSettings.Photo存在信息泄露漏洞。远程攻击者可借助‘filename’参数利用该漏洞获取其他用户的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A