Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-3D24B29698EF4F0153C61051A4D6A52FHistoryDec 12, 2022 - 12:00 a.m.
AList vulnerable to Improper Preservation of Permissions
2022-12-1200:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
6
alist v3.4.0
file upload
vulnerability
improper preservation permissions
software
EPSS
0.001
Percentile
43.1%
Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one).
Related
cvelist
cvelist
CVE-2022-45968
2022-12-12 00:00:00
osv
osv
AList vulnerable to Improper Preservation of Permissions
2022-12-12 15:30:31
AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
2024-08-21 16:03:59
CVE-2022-45968
2022-12-12 14:15:10
prion
prion
Default credentials
2022-12-12 14:15:00
cve
cve
CVE-2022-45968
2022-12-12 14:15:10
nvd
nvd
CVE-2022-45968
2022-12-12 14:15:10
veracode
veracode
Arbitrary File Upload
2022-12-13 05:00:37
github
github
AList vulnerable to Improper Preservation of Permissions
2022-12-12 15:30:31