~ / search / GHSA-957m-g6rf-4c2m

GHSA-957m-g6rf-4c2m

Alist Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-45970

Packages

EcosystemPackageAffectedFixed in
Go github.com/alist-org/alist/v3 <= 3.5.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.

References

External links from the advisory. They lead to third-party sites.