Description
alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/alist-org/alist/v3 | <= 3.16.3 | — | GHSA-hh54-53m7-7ffj |
High · 8.8
CVE-2023-33498
EUVD-2023-1819GHSA-hh54-53m7-7ffj
alist Incorrect Access Control vulnerability
Published Jun 7, 2023 · Updated Jan 7, 2025 · Assigned by mitre