CVE-2022-45968 - CVE House
Back to Database
Status published Unknown CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with...

Vulnerability Description

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protected one).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-45968

Credits & Attribution

No credits recorded in the NVD database.

References

More from alistgo

View All →
CVE-2022-45970
Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via...
Unknown 0
CVE-2022-45969
Alist v3.4.0 is vulnerable to Directory Traversal,...
Unknown 0
CVE-2022-26533
Alist v2.1.0 and below was discovered to contain a cross-site...
Medium 6.1

Affected Vendor

Affected Software

alist
Vulnerable Versions:
3.4.0

Timeline

Official Publish: December 12th, 2022
Last Modified: April 22nd, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.