Description
Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/alist-org/alist/v3 | <= 3.5.1 | — | GHSA-957m-g6rf-4c2m |
Medium · 5.4
CVE-2022-45970
EUVD-2022-7572GHSA-957m-g6rf-4c2m
Alist Cross-site Scripting vulnerability
Published Dec 12, 2022 · Updated Apr 22, 2025 · Assigned by mitre