Skip to content
OpenAdvisories
Critical · 9.3 CVE-2023-0606 EUVD-2023-12644GHSA-8hv3-rpq7-87v3

Cross-site Scripting (XSS) - Reflected in ampache/ampache

Published Feb 1, 2023 · Updated Mar 27, 2025 · Assigned by @huntrdev

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.

Affected products

VendorProductAffectedFixed
ampache ampache/ampache unspecified – < 5.5.7 5.5.7

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS ampache No fix yet —

References