description: A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action.
problem types: Improper Authentication (CWE-287)
affected:
{
product: Synology Photo Station
vendor: Synology
versions:
status: affected, version: before 6.7.3-3432 and 6.3-2967
}