GHSA-jpj5-hg26-6jgcMediumCVSS 6.1

Cross-site Scripting in Alist

Published
March 13, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-26533 →

📋 Description

Alist versions 2.0.10 through 2.1.0 were discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist. This issue was fixed in version 2.1.1.

🎯 Affected products1

  • go/github.com/Xhofe/alist:>= 2.0.10, < 2.1.1

🔗 References (4)