VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Oct 31, 2018· Updated Jun 17, 2026

CVE-2018-13281

CVE-2018-13281

Description

Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Synology/Skynas
    cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*
  • Synology/Vs960hd
    cpe:2.3:a:synology:vs960hd:-:*:*:*:*:*:*:*
  • Synology/Diskstation Manager5 versions
    cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*range: >=6.1,<6.1.7-15284-2
    • cpe:2.3:o:synology:diskstation_manager:5.2:*:*:*:*:*:*:*
    • cpe:2.3:o:synology:diskstation_manager:6.0:*:*:*:*:*:*:*
    • (no CPE)range: <6.2-23739-2
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.