CVE-2018-13282 Other in Photo Station

What is CVE-2018-13282?

CVE-2018-13282 is a medium-severity vulnerability in Synology Photo Station, published on 31 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Weakness: CWE-384

Which versions are affected by CVE-2018-13282?

It affects 1 product.

Products include Synology Photo Station.

How do I fix CVE-2018-13282?

No fix has been published for CVE-2018-13282 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-13282 being exploited?

There is no known exploitation of CVE-2018-13282 in the wild and no public exploit code.

Other vulnerabilities in Synology Photo Station

• CVE-2021-29089 SQL injection in Synology Photo Station Critical 9.8
• CVE-2017-11161 SQL injection in Synology Photo Station Critical 9.8
• CVE-2017-11151 File upload in Synology Photo Station Critical 9.8
• CVE-2017-11153 Deserialization in Synology Photo Station Critical 9.8
• CVE-2016-10329 Command injection in Synology Photo Station Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-35x6-wg3h-rrv6.