GO-2022-1161 AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist

AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist...

AList 安全漏洞

AList is a file listing program with multi-storage support from the individual developer Xhofe in China. A security vulnerability exists in AList version 3.15.1, which stems from the presence of incorrect access control and can be exploited by an attacker to gain access to sensitive information...

GHSA-957M-G6RF-4C2M Alist Cross-site Scripting vulnerability

Alist v3.5.1 is vulnerable to Cross Site Scripting XSS via the bulletin board...

GHSA-4GJR-VGFX-9QVW AList vulnerable to Improper Preservation of Permissions

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one. Version 3.5.1 contains a patch...