Alist Cross-site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-45970 · ADVISORY
• alist-org/alist · WEB
• alist-org/alist · PACKAGE

Mais vulnerabilidades de github.com/alist-org/alist/v3

• CVE-2026-25161ALTO 8.8Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains …
• CVE-2026-25160ALTO 7.4Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables …
• CVE-2024-47067MÉDIO 6.1AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. Th…
• CVE-2023-33498ALTO 8.8alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.
• CVE-2022-45969CRÍTICO 9.8Alist v3.4.0 is vulnerable to Directory Traversal,