Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-47184 EUVD-2024-42302

Ampache vulnerable to Stored XSS via Democratic Playlist Name

Published Sep 27, 2024 · Updated Sep 27, 2024 · Assigned by GitHub_M

Description

Ampache is a web based audio/video streaming application and file manager. Prior to version 6.6.0, the Democratic Playlist Name is vulnerable to a stored cross-site scripting. Version 6.6.0 fixes this issue.

Affected products

VendorProductAffectedFixed
ampache ampache < 6.6.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS ampache No fix yet —

References