Vulnerabilities > Alist Project > Alist > 2.4.2

DATE CVE VULNERABILITY TITLE RISK
2024-09-30 CVE-2024-47067 Cross-site Scripting vulnerability in Alist Project Alist
AList is a file list program that supports multiple storages.
network
low complexity
alist-project CWE-79
6.1
6.1
2023-06-07 CVE-2023-33498 Unrestricted Upload of File with Dangerous Type vulnerability in Alist Project Alist
alist <=3.16.3 is vulnerable to Incorrect Access Control.
network
low complexity
alist-project CWE-434
8.8
8.8