← All advisories

Critical severity9.8NVD Advisory· Published Dec 15, 2022· Updated Jun 17, 2026

CVE-2022-45969

CVE-2022-45969

Description

Alist v3.4.0 is vulnerable to Directory Traversal,

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/alist-org/alist/v3Go	< 3.6.0	3.6.0

Affected products

3

Alistgo/Alist
cpe:2.3:a:alistgo:alist:3.4.0:*:*:*:*:*:*:*
Alist/Alistcpe-rescue
ghsa-coords
pkg:golang/github.com/alist-org/alist/v3
Range: < 3.6.0

Patches

Vulnerability mechanics

References

4

github.com/alist-org/alist/issues/2449nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-pmg2-rph8-p8r6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-45969ghsaADVISORY
github.com/alist-org/alist/commit/b5bf5f43253175b55fa2cb511fea601e677d2d83ghsaWEB

News mentions

0

No linked articles in our index yet.