Skip to content
OpenAdvisories

Package · Go

github.com/alist-org/alist

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.1

    Alist Contains a Reflected Cross-Site Scripting Vulnerability

    AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an a…