Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-45968
8.8
HIGHCVSS v3
Published
December 12, 2022
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one).
AlistGo/alist
GitHub🗂️A file list/WebDAV program that supports multiple storages, powered by Gin and Solidjs. / 一个支持多存储的文件列表/WebDAV程序，使用 Gin 和 Solidjs。
GitHub🗂️A file list/WebDAV program that supports multiple storages, powered by Gin and Solidjs. / 一个支持多存储的文件列表/WebDAV程序，使用 Gin 和 Solidjs。= 3.4.0NVD
alist
NPM
