Executive brief
Alist Cross-site Scripting vulnerability
Affected products
- Go github.com/alist-org/alist/v3
Junglewise Threat Intelligence
CVE-2022-45970: Alist Cross-site Scripting vulnerability
CVE-2022-45970 · Severity: low · CVSS 3.1 · Published 2022-12-12
Technologies: github.com/alist-org/alist/v3 (Go). Vendors: Go.
Related threats
- Alist path traversal in multiple file operation handlers
- AlistGo Alist improper certificate validation in storage drivers
- GO-2024-3190 - Alist reflected Cross-Site Scripting vulnerability in github.com/alist-org/alist
- GO-2022-1161 - AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
- GO-2022-1171 - Alist vulnerable to Path Traversal in github.com/alist-org/alist