[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEw4_IWUtKlAhOLVfBL4F_MKl1q5bRd7O-aVnTpa9KnA":3,"g5a-risk:CVE-2017-11154":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":52,"references":53,"referencesCount":69,"weaknesses":70,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":15,"otxData":15,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":118,"notableEvents":119},"CVE-2017-11154","What is CVE-2017-11154?","Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type parameter.","Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create a...","2017-08-08T15:29:07.803","2025-04-20T01:37:25.86",7.2,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","HIGH","NONE","UNCHANGED",1.2,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.14216,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"synology","photo_station","*","cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"6.3-2967","cpe:2.3:a:synology:photo_station:6.3-2967:*:*:*:*:*:*:*",2,[54,60,65,67],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F42434\u002F","Exploit-db",[58,59],"Third Party Advisory","VDB Entry",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.synology.com\u002Fen-global\u002Fsupport\u002Fsecurity\u002FSynology_SA_17_34_PhotoStation","Synology",[64],"Vendor Advisory",{"url":55,"source":56,"tags":66},[58,59],{"url":61,"source":62,"tags":68},[64],4,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",1,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2017-11154? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2017-11154, a high severity cyber security vulnerability from 2017. Unrestricted file upload vulnerability in PixlrEditorHandle...","CVE-2017-11154, CVE-2017-11154 vulnerability, CVE-2017-11154 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, synology security, photo_station vulnerability","\u002Fwhat-is\u002Fcve-2017-11154",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2017-11154","Cybersecurity","CVE-2017-11154, CVE-2017-11154 vulnerability, CVE-2017-11154 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":15,"Negate":15,"Nodes":109},[110],{"Operator":111,"Negate":15,"CPEMatch":112},"OR",[113,116],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":114,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":115},"FAD31531-C414-44A3-AE98-4FD62506367A","6.7.2-3429",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":117,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DE5F6615-7773-42A5-9A58-7248D4820E46",[],[],{"lastModified":11,"cacheTime":121,"version":32},1793220354785,{"score":123,"band":124,"action":125,"scoredAt":126},48,"Medium","Plan remediation","2026-07-01T10:21:06.218711+00:00"]