Skip to content
OpenAdvisories

Vendor

alist-org

1 known vulnerabilities.

Products

alist 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2024-47067

    Alist Contains a Reflected Cross-Site Scripting Vulnerability

    AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an a…

    alist-org alist github.com/alist-org/alist/v3 github.com/alist-org/alist Go