Filtered by vendor Alist Project Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-45969 1 Alist Project 1 Alist 2024-08-03 9.8 Critical
Alist v3.4.0 is vulnerable to Directory Traversal,
CVE-2022-45970 1 Alist Project 1 Alist 2024-08-03 5.4 Medium
Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.
CVE-2022-45968 1 Alist Project 1 Alist 2024-08-03 8.8 High
Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one).
CVE-2022-26533 1 Alist Project 1 Alist 2024-08-03 6.1 Medium
Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.
CVE-2023-33498 1 Alist Project 1 Alist 2024-08-02 8.8 High
alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.
CVE-2023-31726 1 Alist Project 1 Alist 2024-08-02 7.5 High
AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information.