Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-25808
8.3
HIGHCVSS v3
Published
March 22, 2024
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.
LycheeOrg/Lychee
GitHubA great looking and easy-to-use photo-management-system you can run on your server, to manage and share photos.
GitHubA great looking and easy-to-use photo-management-system you can run on your server, to manage and share photos.= 3.1.6NVD
Docker Hub