Vulnerabilities > CVE-2021-32644 - Unspecified vulnerability in Ampache 4.4.2

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
ampache
NVD
Published: 2021-06-22
Updated: 2024-11-21

Summary

Ampache is an open source web based audio/video streaming application and file manager. Due to a lack of input filtering versions 4.x.y are vulnerable to code injection in random.php. The attack requires user authentication to access the random.php page unless the site is running in demo mode. This issue has been resolved in 4.4.3.

Vulnerable Configurations

Part Description Count
Application
Ampache
1

References