Aampache

Products

Exploited and recent CVEs

• CVE-2024-51484 Medium 5.3 Insufficient Validation in Controllers (Activation/Deactivation) in Ampache 0.4%
• CVE-2024-51485 Medium 5.3 Insufficient Validation in Plugins (Activation/Deactivation) in Ampache 0.4%
• CVE-2024-51486 Medium 5.5 Stored Cross-Site Scripting in Ampache 0.5%
• CVE-2024-51487 Medium 5.3 Insufficient Validation in Catalog (Activation/Deactivation) in Ampache 0.4%
• CVE-2024-51488 Medium 5.3 Insufficient Validation in Delete Message in Ampache 0.3%
• CVE-2024-51489 Medium 5.3 Insufficient Message Token Validation in Ampache 0.3%
• CVE-2024-51490 Medium 5.5 Stored Cross-Site Scripting in Ampache 0.5%
• CVE-2024-47828 Medium 5.3 Cross-Site Request Forgery in ampache 0.3%
• CVE-2024-47184 Medium 6.1 Ampache vulnerable to Stored XSS via Democratic Playlist Name 0.5%
• CVE-2024-41665 Medium 5.5 Ampache Stored Cross-site Scripting Vulnerability 0.5%
• CVE-2024-28852 Medium 6.1 Ampache has multiple reflective XSS vulnerabilities 0.5%
• CVE-2024-28853 Low 3.9 Ampache Stored XSS 0.6%
• CVE-2023-0771 High 7.2 SQL Injection in ampache/ampache 0.7%
• CVE-2023-0606 Critical 9.3 Cross-site Scripting (XSS) - Reflected in ampache/ampache 0.6%
• CVE-2022-4665 Low 3.1 Unrestricted Upload of File with Dangerous Type in ampache/ampache 0.8%
• CVE-2021-32644 Medium 6.4 Cross-site Scripting in Random.php 0.8%
• CVE-2020-15153 High 8.2 Unauthenticated SQL injection in Ampache 2.4%
• CVE-2021-21399 Critical 9.1 Unauthenticated SubSonic backend access in Ampache 1.4%