Unrestricted Upload Of File

github.com/alist-org/alist is vulnerable to Unrestricted Upload Of File. The vulnerability exists due to faulty access control, which allows an attacker with a low-privileged account to upload arbitrary files...