Directory Traversal

2022-12-1905:50:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

directory traversal

vulnerability

file upload permissions

restricted files

github.

EPSS

0.002

Percentile

52.6%

JSON

github.com/alist-org/alist is vulnerable to directory traversal. The vulnerability exists due to a lack of validation of the file upload permissions in the library, allowing an attacker to gain access to restricted files using ... / on the path URL