description: Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to read arbitrary files via unspecified vectors.
problem types: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)
affected:
{
product: Synology Photo Station
vendor: Synology
versions:
status: affected, version: before 6.7.4-3433 and 6.3-2968
}