CVE-2018-13282

MEDIO 6.3CVE-2018-13282 · Published 31/10/2018 · updated 17/06/2026

En resumen

CVE-2018-13282 es una vulnerabilidad MEDIO (CVSS 6.3) que afecta a photo station (synology).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.96%, mayor que el 61.5% de las vulnerabilidades.
Solución: actualizar a 6.3-2976, 6.8.7-3481 o posterior.

Package	Affected versions	Patched versions
photo station synology	`≥ 6.3, < 6.3-2976≥ 6.8, < 6.8.7-3481`	`6.3-29766.8.7-3481`

Description

Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

References

synology.com/en-global/support/security/Synology_SA_18_37 · Vendor Advisory

Más vulnerabilidades de photo station

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

photo station

synology

≥ 6.3, < 6.3-2976≥ 6.8, < 6.8.7-3481

6.3-29766.8.7-3481

Más vulnerabilidades de photo station

Ver todo →