CVE-2022-45968

creationtimestamp| type| source ---|---|--- 2022-12-12 16:25:57+00:00| seen| https://t.me/cibsecurity/54316 2025-04-22 21:04:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12977...

CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...