Alist Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-45970 · ADVISORY
• alist-org/alist · WEB
• alist-org/alist · PACKAGE

github.com/alist-org/alist/v3 のその他の脆弱性

• CVE-2026-25161高 8.8Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains …
• CVE-2026-25160高 7.4Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables …
• CVE-2024-47067中 6.1AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. Th…
• CVE-2023-33498高 8.8alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.
• CVE-2022-45969緊急 9.8Alist v3.4.0 is vulnerable to Directory Traversal,