Lucene search

K
osvGoogleOSV:GHSA-JPJ5-HG26-6JGC
HistoryMar 13, 2022 - 12:00 a.m.

Cross-site Scripting in Alist

2022-03-1300:00:54
Google
osv.dev
8
alist
cross-site scripting
vulnerability
version 2.1.1

EPSS

0.001

Percentile

34.0%

Alist versions 2.0.10 through 2.1.0 were discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist. This issue was fixed in version 2.1.1.

EPSS

0.001

Percentile

34.0%

Related for OSV:GHSA-JPJ5-HG26-6JGC