Executive brief
Alist reflected Cross-Site Scripting vulnerability in github.com/alist-org/alist
Affected products
- Go github.com/alist-org/alist/v3
- Go github.com/alist-org/alist
Junglewise Threat Intelligence
CVE-2024-47067: GO-2024-3190 - Alist reflected Cross-Site Scripting vulnerability in github.com/alist-org/alist
CVE-2024-47067 · Severity: low · CVSS 3.1 · Published 2024-10-11
Technologies: github.com/alist-org/alist/v3 (Go), github.com/alist-org/alist (Go). Vendors: Go.
Related threats
- Alist path traversal in multiple file operation handlers
- AlistGo Alist improper certificate validation in storage drivers
- GO-2022-1161 - AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
- GO-2022-1171 - Alist vulnerable to Path Traversal in github.com/alist-org/alist
- alist Incorrect Access Control vulnerability