Volerion logoVolerion
Volerion logoVolerion

Synology File Station Metadata Exposure Vulnerability

Vulnerability

A vulnerability exists in the File Station component of Synology's SRM 1.3, allowing remote authenticated users to access file metadata and path information. This issue is categorized as a moderate severity path traversal vulnerability.

Impact

Exploitation of this vulnerability could lead to unauthorized access to file metadata and path information, potentially allowing for further exploitation or information disclosure.

Remediation

Users are advised to upgrade to Synology SRM version 1.3.1-9346-13 or above.

Added: Dec 4, 2025, 3:27 PM
Updated: Dec 4, 2025, 6:21 PM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
0.6
exploitability
4.9
remediation
7.7
relevance
1.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.