← Back
CWE-625

21 CVEs • Abstraction: Base

Permissive Regular Expression

The product uses a regular expression that does not sufficiently restrict the set of allowed values.

JSON object

Loading...

CVEs (21)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-8926
1Synology
1Photo Station
Jun 17, 2026
Jun 8, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct privilege escalation attacks via the fullname...Show more
Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct privilege escalation attacks via the fullname parameter.Show less