CVE-2024-28853

Published March 27th, 2024

View on NVD ↗

CVSS v3

3.9

LOW

CVSS v2

N/A

Affected

PROJECT

Description

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting (XSS) vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of /preferences.php?action=admin_update_preferences. This vulnerability is fixed in 6.3.1.

ampache/ampache

A web based audio/video streaming application and file manager allowing you to access your music & videos from anywhere, using almost any internet enabled device.

GitHub

3.79K