github.com/alist-org/alist/v3

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.1

CVE-2024-47067

Alist Contains a Reflected Cross-Site Scripting Vulnerability

AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an a…

alist-org alist github.com/alist-org/alist/v3 github.com/alist-org/alist Go

Sep 30, 2024
Medium 5.4

CVE-2022-45970

Alist Cross-site Scripting vulnerability

Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.

github.com/alist-org/alist/v3 Go

Dec 12, 2022