Alistgo

9 CVEs across 1 Alistgo products. Browse Alistgo vulnerabilities, severities, and proof-of-concept exploits.

Alistgo products with known CVEs

Product	CVEs
Alist	9

Alistgo CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2026-25161`	High	`8.8`	2026-02-04	Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains path traversal vuln…
`CVE-2026-25160`	Critical	`9.1`	2026-02-04	Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables TLS certificate ver…
`CVE-2024-47067`	Medium	`6.1`	2024-09-30	AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link…
`CVE-2023-33498`	High	`8.8`	2023-06-07	alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.
`CVE-2023-31726`	High	`7.5`	2023-05-23	AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information.
`CVE-2022-45969`	Critical	`9.8`	2022-12-15	Alist v3.4.0 is vulnerable to Directory Traversal,
`CVE-2022-45970`	Medium	`5.4`	2022-12-12	Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.
`CVE-2022-45968`	High	`8.8`	2022-12-12	Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one).
`CVE-2022-26533`	Medium	`6.1`	2022-03-12	Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.