GO-2022-1161
Dashboard / Vulnerabilities / GO-2022-1161
GO-2022-1161
Published: 21 Aug 2024Last Modified: 3 Mar 2026
Aliases:
Summary: AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
Details: AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
References: https://github.com/advisories/GHSA-4gjr-vgfx-9qvw, https://nvd.nist.gov/vuln/detail/CVE-2022-45968, https://github.com/alist-org/alist/commit/85e1350af82e1759ca6580895e48ab969eb566cf, https://github.com/alist-org/alist/issues/2444
Affected packages
Package
Name: github.com/alist-org/alist
Purl: pkg:golang/github.com/alist-org/alist
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -None
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
