Executive brief
alist Incorrect Access Control vulnerability
Affected products
- Go github.com/alist-org/alist/v3
Junglewise Threat Intelligence
CVE-2023-33498: alist Incorrect Access Control vulnerability
CVE-2023-33498 · Severity: low · CVSS 3.1 · Published 2023-06-07
Technologies: github.com/alist-org/alist/v3 (Go). Vendors: Go.
Related threats
- Alist path traversal in multiple file operation handlers
- AlistGo Alist improper certificate validation in storage drivers
- GO-2024-3190 - Alist reflected Cross-Site Scripting vulnerability in github.com/alist-org/alist
- GO-2022-1161 - AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
- GO-2022-1171 - Alist vulnerable to Path Traversal in github.com/alist-org/alist