CVE-2017-12071

MEDIUM · CVSS 6.5 EPSS 1.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-09-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-12071

Severity

MEDIUM

CVSS

6.5

EPSS

1.37%

Original NVD Description

Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to download arbitrary local files via the url parameter.