CVE-2018-13288

https://notcve.org/view.php?id=CVE-2018-13288

Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter. Una vulnerabilidad de exposición de información en SYNO.FolderSharing.List en Synology File Station, en versiones anteriores a la 1.2.3-0252 y en las anteriores a la 1.1.5-0125, permite a los atacantes remotos obtener información sensible mediante los parámetros (1) folder_path o (2) real_path. • https://www.synology.com/security/advisory/Synology_SA_18_35 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •