Go/github.com/alist-org/alist/v3 CVE-2024-47067: medium 6.1, EPSS 0.42%

Alist reflected Cross-Site Scripting vulnerability

Action: Upgrade github.com/alist-org/alist/v3 to 3.29.0 or later.

go get github.com/alist-org/alist/v3@v3.29.0

Affected

Fixed versions

Sources

• osv: GHSA-8pph-gfhp-w226
• https://nvd.nist.gov/vuln/detail/CVE-2024-47067
• https://github.com/alist-org/alist/commit/6100647310594868e931f3de1188ddd8bde93b78
• https://github.com/alist-org/alist
• https://securitylab.github.com/advisories/GHSL-2023-220_Alist

CVE-2024-47067 · published 2024-10-10T20:23:32Z · modified 2024-10-11T14:56:59.579428Z · JSON