Executive brief
AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
Affected products
- Go github.com/alist-org/alist/v3
- Go github.com/alist-org/alist
Junglewise Threat Intelligence
CVE-2022-45968: GO-2022-1161 - AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
CVE-2022-45968 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/alist-org/alist/v3 (Go), github.com/alist-org/alist (Go). Vendors: Go.
Related threats
- Alist path traversal in multiple file operation handlers
- AlistGo Alist improper certificate validation in storage drivers
- GO-2024-3190 - Alist reflected Cross-Site Scripting vulnerability in github.com/alist-org/alist
- GO-2022-1171 - Alist vulnerable to Path Traversal in github.com/alist-org/alist
- alist Incorrect Access Control vulnerability