CVE-2021-21399

Ampache (web-based audio/video streaming app and file manager) is affected by CVE-2021-21399. Versions prior to 4.4.1 allow unauthenticated access to the Ampache backend via the Subsonic API if an attacker uses a username not associated with the site to bypass authentication. This is described in...