Alist Cross-site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-45970 · ADVISORY
• alist-org/alist · WEB
• alist-org/alist · PACKAGE

github.com/alist-org/alist/v3의 다른 취약점

• CVE-2026-25161높음 8.8Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains …
• CVE-2026-25160높음 7.4Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables …
• CVE-2024-47067보통 6.1AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. Th…
• CVE-2023-33498높음 8.8alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.
• CVE-2022-45969심각 9.8Alist v3.4.0 is vulnerable to Directory Traversal,