| Package | Affected versions | Patched versions |
|---|---|---|
| download station | = 3.2-2295= 3.3-2382= 3.3-2383= 3.3-2386= 3.4-2477= 3.4-2478= 3.4-2480= 3.4-2485= 3.4-2486= 3.4-2489= 3.4-2490= 3.4-2514= 3.4-2555= 3.4-2557= 3.4-2558= 3.5-2638= 3.5-2705= 3.5-2706= 3.5-2955= 3.5-2956= 3.5-2962= 3.5-2963= 3.5-2967= 3.5-2968= 3.5-2970= 3.5-2973= 3.5-2980= 3.5-2982= 3.8.0-3416= 3.8.1-3420= 3.8.2-3455= 3.8.3-3458= 3.8.4-3468 |
Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free