Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Audiobookshelf Arbitrary File Read Vulnerability
Vulnerability Description
Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, any user (regardless of their permissions) may be able to read files from the local file system due to a path traversal in the `/hls` endpoint. This issue may lead to Information Disclosure. As of time of publication, no patches are available.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Audiobookshelf 路径遍历漏洞
Vulnerability Description
Audiobookshelf是audiobookshelf开源的一个自托管的有声读物和播客服务器。 Audiobookshelf 2.4.3及之前版本存在路径遍历漏洞，该漏洞源于存在路径遍历，任何用户都可以从本地文件系统读取文件，可能会导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A