Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability
Vulnerability Description
Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, users with the update permission are able to read arbitrary files, delete arbitrary files and send a GET request to arbitrary URLs and read the response. This issue may lead to Information Disclosure. As of time of publication, no patches are available.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
Audiobookshelf 代码问题漏洞
Vulnerability Description
Audiobookshelf是audiobookshelf开源的一个自托管的有声读物和播客服务器。 Audiobookshelf 2.4.3及之前版本存在代码问题漏洞，该漏洞源于具有更新权限的用户能够读取任意文件、删除任意文件以及向任意URL发送GET请求并读取响应，可能会导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A