Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38446
HistoryDec 13, 2022 - 5:00 a.m.

Arbitrary File Upload

2022-12-1305:00:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
arbitrary file upload
alist-org
github

EPSS

0.001

Percentile

43.1%

github.com/alist-org/alist is vulnerable to arbitrary file upload. The vulnerability exists as the file upload permission is not properly validated, allowing an attacker to upload malicious files to any folder.

EPSS

0.001

Percentile

43.1%