alist Incorrect Access Control vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-33498 · ADVISORY
• YUyuanAN-com/loophole · WEB
• alist-org/alist · PACKAGE

github.com/alist-org/alist/v3 のその他の脆弱性

• CVE-2026-25161高 8.8Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains …
• CVE-2026-25160高 7.4Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables …
• CVE-2024-47067中 6.1AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. Th…
• CVE-2022-45969緊急 9.8Alist v3.4.0 is vulnerable to Directory Traversal,
• CVE-2022-45970中 5.4Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.