Path traversal

2024-03-0817:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

photo station

vulnerability

fixed

version 6.4.2

sensitive data exposure

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.7%

JSON

A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following version:
Photo Station 6.4.2 ( 2023/12/15 ) and later

References

www.qnap.com/en/security-advisory/qsa-24-13