4 matches found
GHSA-X4Q4-7PHH-42J9 Alist vulnerable to Path Traversal in multiple file operation handlers
Summary The application contains a Path Traversal vulnerability CWE-22 in multiple file operation handlers. An authenticated attacker can bypass directory-level authorisation by injecting traversal sequences into filename components, enabling unauthorised file removal, movement and copying across...
CVE-2004-0921
AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets...
CVE-2004-0921
CVE-2004-0921 affects AFP Server on Mac OS X 10.3.x–10.3.5. When a guest has an AFP volume mounted, they can terminate authenticated user mounts via modified SessionDestroy packets, enabling partial impact to confidentiality, integrity, and availability. Connected sources corroborate the affected...