Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-28852

Ampache has multiple reflective XSS vulnerabilities

Description

Ampache is a web based audio/video streaming application and file manager. Ampache has multiple reflective XSS vulnerabilities,this means that all forms in the Ampache that use `rule` as a variable are not secure. For example, when querying a song, when querying a podcast, we need to use `$rule` variable. This vulnerability is fixed in 6.3.1

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ampache ampache

  • < 6.3.1affected

References