Photo Station vulnerabilities

2 known vulnerabilities in Photo Station from Synology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  BeePhotos: Improper Neutralization of Special Elements used in a Command

  CVE-2024-10443Nov 15, 2024SynologyEPSS 28.5%

  Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and 1.1.0-10053 and Synology Photos before 1.6.2-0720 and 1.7.0-0795 allows remote attac

• 7.5 High severity

  Photo Station: Session Fixation

  CVE-2022-22681Jul 6, 2022SynologyEPSS 1.03%

  Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors.