Alistgo
Alistgo Alist: vulnerabilidades y CVE
Alistgo Alist tiene 9 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses2
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-25161 | Alta (8.8) | 0.81% | — | 4 feb 2026 | Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains path traversal vulnerability in multiple file operation handlers. An… |
| CVE-2026-25160 | Alta (7.4) | 0.25% | — | 4 feb 2026 | Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables TLS certificate verification by default for all outgoing storage driver… |
| CVE-2024-47067 | Media (5.1) | 0.42% | — | 30 sept 2024 | AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in… |
| CVE-2023-33498 | Alta (8.8) | 0.74% | — | 7 jun 2023 | alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file. |
| CVE-2023-31726 | Alta (7.5) | 1.1% | — | 23 may 2023 | AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information. |
| CVE-2022-45969 | Crítica (9.8) | 1.2% | — | 15 dic 2022 | Alist v3.4.0 is vulnerable to Directory Traversal, |
| CVE-2022-45970 | Media (5.4) | 0.47% | — | 12 dic 2022 | Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board. |
| CVE-2022-45968 | Alta (8.8) | 0.98% | — | 12 dic 2022 | Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one). |
| CVE-2022-26533 | Media (6.1) | 0.72% | — | 12 mar 2022 | Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.